UKBouldering.com

GDPR type question (Read 4703 times)

shark

Offline
  • *****
  • Administrator
  • forum hero
  • Posts: 8736
  • Karma: +629/-17
  • insect overlord #1
GDPR type question
April 18, 2024, 07:15:33 pm
Hopefully most aware that Iíve been running a petition on Change.org to have the BMC include a couple of resolutions at the AGM.

Iíve fallen foul of trying to validate a lot of the signatories being BMC members so trying to reach unverified signatories and ask them to email me signatories.

I had a post swiftly pulled on UKC that read:

 
Does anyone know these climbers?

If so can you please contact them and email me their BMC member numbers to simon@simonleeconsulting.co.uk so I can have their petition signature validated by the BMC Office. The deadline is Saturday 27th.

I then listed the names of 200 or so unverified signatories.

The petition and support of resolutions isnít a private matter so did I do anything perceptually or actually wrong?



mrjonathanr

Offline
  • *****
  • forum hero
  • Posts: 5440
  • Karma: +247/-6
  • Getting fatter, not fitter.
#1 Re: GDPR type question
April 18, 2024, 07:40:09 pm
No expert, but I suspect you are functioning as a data processor under GDPR and the individuals have not given specific consent for their identities as signatories to be published.
https://commission.europa.eu/law/law-topic/data-protection/reform/rules-business-and-organisations/obligations/controllerprocessor/what-data-controller-or-data-processor_en


shark

Offline
  • *****
  • Administrator
  • forum hero
  • Posts: 8736
  • Karma: +629/-17
  • insect overlord #1
#2 Re: GDPR type question
April 18, 2024, 08:11:01 pm
Thanks Jon. Presumably there should be an expectation that signatory names will be passed to whoever is being petitioned but cant find any guidance on the Change website even on this.

Fultonius

Offline
  • *****
  • forum hero
  • Posts: 4364
  • Karma: +146/-3
  • Was strong but crap, now weaker but better.
    • Photos
#3 Re: GDPR type question
April 18, 2024, 09:04:45 pm
 Well, I signed and then realised I wasn't a BMC member so didn't follow up. You can remove me from the list if that helps. I'm sure you figure out who I am...

remus

Online
  • *****
  • forum hero
  • Posts: 2925
  • Karma: +149/-1
#4 Re: GDPR type question
April 18, 2024, 09:13:42 pm
I do GDPR stuff for lattice. Mr J is basically correct. One of the guiding principles of GDPR is that you clearly communicate the purpose for which data is being collected and to get explicit consent for this usage, so in this case I would say that it was not clearly communicated that the names would be shared publicly.

SA Chris

Offline
  • *****
  • forum hero
  • Posts: 29342
  • Karma: +638/-12
    • http://groups.msn.com/ChrisClix
#5 Re: GDPR type question
April 18, 2024, 10:06:44 pm
From my experience with GDPR, remus (and mjjr) are correct. Explicit consent is needed.

shark

Offline
  • *****
  • Administrator
  • forum hero
  • Posts: 8736
  • Karma: +629/-17
  • insect overlord #1
#6 Re: GDPR type question
April 18, 2024, 11:56:35 pm
Thanks guys

 

SimplePortal 2.3.7 © 2008-2024, SimplePortal