IETF Logo Mail Archive

Re: Proposed IETF Websites’ Privacy Policy; Community Input Requested

"Joseph Lorenzo Hall" <jhall@cdt.org> Tue, 03 February 2015 18:20 UTC

Return-Path: <jhall@cdt.org>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 761FA1A8A41 for <ietf@ietfa.amsl.com>; Tue, 3 Feb 2015 10:20:24 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.379
X-Spam-Level:
X-Spam-Status: No, score=0.379 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7, SPF_NEUTRAL=0.779] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DhDM6foMzcdW for <ietf@ietfa.amsl.com>; Tue, 3 Feb 2015 10:20:22 -0800 (PST)
Received: from mail-qa0-f44.google.com (mail-qa0-f44.google.com [209.85.216.44]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 04EA21A6EFB for <ietf@ietf.org>; Tue, 3 Feb 2015 10:20:01 -0800 (PST)
Received: by mail-qa0-f44.google.com with SMTP id w8so35024373qac.3 for <ietf@ietf.org>; Tue, 03 Feb 2015 10:20:01 -0800 (PST)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:date:mime-version:message-id:in-reply-to :references:from:to:cc:subject:content-type; bh=aeaWQPOMPuRFeqcpEAE7FJItf/Lg23JviMmhH/z2NRs=; b=OI3yTwI9AgbuJiKrRQfyQQEC6MR/TNVBWdLgetN1KQUkMqXyCGTHiyxtqkx02N2WHP R/NrZecyXbVIQif8ApufduzEqB+mTBidFnHlnLPQGmRz/Ogk5v7nbt5qPSyQKRq/X2OV qaLoQ7KY+OKB6jraVL7viW+fwxZ6udqUOj1zhVpnM6dTT9CA5IsTTDqL3CvtuXSKdRvh BvkoHgTaXxIj6PwzSCnLklfraZDuDucluWKioF02XL7toOKh1nDqxJOilvgDjZnwbFRI yGOVdTXsqjh0tIMVPqVVjlLLBmCYscq657EaAV/Ad9lG4Nnloa7t7eC5D0blK+Trx+AD 9/xA==
X-Gm-Message-State: ALoCoQnT6Mv5XzO4IuPhl5iayz2h1cOn0yzMoTphs8pj5keNApjp+5lab2S0Xno1U3ASKYKB2NI/
X-Received: by 10.224.129.134 with SMTP id o6mr55860007qas.51.1422987601154; Tue, 03 Feb 2015 10:20:01 -0800 (PST)
Received: from hedwig-30.prd.orcali.com (ec2-54-85-253-125.compute-1.amazonaws.com. [54.85.253.125]) by mx.google.com with ESMTPSA id h34sm21911089qge.6.2015.02.03.10.19.59 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 03 Feb 2015 10:20:00 -0800 (PST)
Date: Tue, 03 Feb 2015 10:20:00 -0800
X-Google-Original-Date: Tue, 03 Feb 2015 18:19:59 GMT
MIME-Version: 1.0
X-Mailer: Nodemailer (0.5.0; +http://www.nodemailer.com/)
Message-Id: <1422987599207.aeb0f724@Nodemailer>
In-Reply-To: <20150203170801.17590.qmail@ary.lan>
References: <20150203170801.17590.qmail@ary.lan>
X-Orchestra-Oid: FFD2232C-2C54-48D8-B1C3-6EE3A2D7F668
X-Orchestra-Sig: 978569feabb8af3624ad5ff9efbb7d124c733f73
X-Orchestra-Thrid: TD4ADCF59-F654-4223-8C30-C7FABEA56937_1492102977720756819
X-Orchestra-Thrid-Sig: 1d0cd6261cb3309bd71c536c726aa6c0cb17d02b
X-Orchestra-Account: 3ebbf046581d5fbd8166fd67bdebdcdf861df32d
From: Joseph Lorenzo Hall <jhall@cdt.org>
To: John Levine <johnl@taugh.com>
Subject: Re: Proposed IETF Websites’ Privacy Policy; Community Input Requested
Content-Type: multipart/alternative; boundary="----Nodemailer-0.5.0-?=_1-1422987600108"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/VJL-P6GQklDDTlb9DsptDrjgkDU>
X-Mailman-Approved-At: Wed, 04 Feb 2015 08:58:10 -0800
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Feb 2015 18:20:25 -0000

Hi, the law in question "applies to
operators of commercial web sites and online services that collect personally identifiable
information about Californians." [1] Like any responsible online commercial entity, the IETF likely has legal counsel that tries to aggregate all of these kinds of legal requirements into a global view of what needs to be affirmatively stated in a privacy policy... 






[1]: https://oag.ca.gov/sites/all/files/agweb/pdfs/cybersecurity/making_your_privacy_practices_public.pdf




--Joseph Lorenzo Hall

Chief Technologist

Center for Democracy & Technology

1634 Eye St., NW

Washington, DC 20006

+1 202-407-8825

https://josephhall.org/

On Tue, Feb 3, 2015 at 12:08 PM, John Levine <johnl@taugh.com> wrote:

>>We are required by California law ...
> Why does California law apply to the IETF? To the extent that the IETF
> has a legal existence, it is my understanding that ISOC and CNRI, the
> grantors of the IETF trust, live in Virginia.  AMS is in California
> but AMS is a contractor.
> R's,
> John
> PS: I'm not opposed to a reasonable privacy policy, but I am opposed
> to legal creep.  The next thing you know all the mail will have
> footers purporting to be confidential.

v2.23.0 | Report a Bug | By Email