Re: [Doh] GDPR and DoH

[Jim Reid <[e-mail]>]

On 7 Apr 2019, at 15:55, Adam Roach <[e-mail]> wrote:
> 
> On 4/7/19 15:33, Jim Reid wrote:
>> That said, I think it’s important that this WG is at least aware of these problems and documents them somehow.
> 
> Are we going to do a survey of privacy regulations in the other 167 countries also?

IMO no. That’s clearly impractical. Even if the IETF had the appropriate legal expertise. Which it doesn’t.

I think we should approach these issues on a case-by-case basis when they emerge and are brought to the IETF’s attention. EU regulations might need closer consideration because: (a) they tend to be at the vanguard on data protection/privacy issues; (b) other countries often cut & paste (pretty much) EU data protection/privacy stuff into their own legislation.

> How frequently do you see us updating such documentation?

As and when the need arises? Like we do with every RFC. :-)

The sort of documentation I had in mind would be something like: “Here’s what we as protocol experts think the impact of GDPR (or whatever) might be on deployment of protocol X: .... This is not legal advice. For definitive information, consult your DPA and/or suitably qualified legal advisors. The IETF hopes the info above may be useful input to those discussions that need to take place elsewhere.”.