Re: IETF privacy policy - update

[todd glassey <[e-mail]>]

 On 7/6/2010 2:45 PM, joel jaeggli wrote:
> On 2010-07-06 03:56, Iljitsch van Beijnum wrote:
>> On 5 jul 2010, at 18:05, Alissa Cooper wrote:
>>
>>> 1) Respond on this list if you support the idea of the IETF having
>>> a privacy policy (a simple "+1" will do).
>>
>> I'm torn between "good to have this written down" and "do we really
>> need to go out and look for more process work".
>>
>>> 2) If you have comments and suggestions about the policy itself,
>>> send them to this list.
>>
>> What I'm missing is what happens with the information described under
>> "Registering to attend a meeting or social event:", there are no
>> retention periods mentioned (that I noticed).
>
> the trust's records retention policy already deals with registration.

These records are constrained by a number of privacy statutes which
cannot be signed away. That is why this must be done outside the IETF's
normal process.

What should happen is that a committee should produce this and then that
be formally disclosed to the entire IETF membership - meaning every
member of every list, the IESG, IRTF, and IAOC as well.

That way positive disclosure can be accomplished. This also should be
redone on a yearly basis to reinforce this mandate.

Todd

>  _______________________________________________
>> Ietf mailing list [e-mail]
>> https://www.ietf.org/mailman/listinfo/ietf
>>
>
> _______________________________________________
> Ietf mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/ietf
>