Re: [Doh] GDPR and DoH

[Adam Roach <[e-mail]>]

On 4/7/19 10:43, Vittorio Bertola wrote:
> This is the objection that led several people to raise this point in the discussion, and I think it is a valid objection even if we are not lawyers.


There was context to my reply: Stephen had provided his rationale for 
why he thought that Brian's interpretation of the GDPR was not 
necessarily correct. Brian responded by saying that this disagreement in 
the IETF over GDPR consent applicability was a disservice to users.

The point of my response is that it's really not: even if the IETF were 
to form a consensus position on the topic of GDPR applicability, it 
wouldn't be worth the paper it's written on. As a technical standards 
body, we're just not the experts here.

To be clear, I think we should and do take into consideration issues of 
user privacy and agency and several closely related topics. What I'm 
objecting to is the attempt to parse applicability of finer points of 
the GDPR: these are legal issues, and we are not lawyers. The line I'm 
drawing here is roughly the one between Natural Law and Positive Law.

I would advise that anyone who wants to discuss the Natural Law 
implications do so in a thread with a different subject line, and that 
those who want to discuss GDPR applicability do so in a legal forum 
rather than a technical one.

/a