Gentoo Archives: gentoo-project

From: Raymond Jennings <shentino@×××××.com>
To: gentoo-project@l.g.o
Subject: Re: [gentoo-project] Comrel Improvements: Expectations of Privacy
Date: Sun, 02 Oct 2016 04:55:37
Message-Id: 1475384131.32493.1@smtp.gmail.com
In Reply to: Re: [gentoo-project] Comrel Improvements: Expectations of Privacy by "Robin H. Johnson"
1 On Sat, Oct 1, 2016 at 9:51 PM, Robin H. Johnson <robbat2@g.o>
2 wrote:
3 > On Sat, Oct 01, 2016 at 01:22:24PM -0700, Raymond Jennings wrote:
4 >> NB: I think that there should be public and convenient
5 >> documentation
6 >> citing where the assets containing such information are located, as
7 >> a
8 >> means of public declaration of what jurisdiction applies.
9
10 > The infra wiki pages of server lists do explicitly specify where the
11 > various servers are physically located. None of them are in New
12 > Mexico.
13 > What they don't visibly track is that that Infra can & does move
14 > services around over time, depending on the availability of sponsor
15 > hardware, requests of sponsors, and appropriate resources for the
16 > growth
17 > of larger services. [Eg HostVirtual recently contacted us to migrate
18 > some services, because they wanted to decommission old hardware]
19 >
20 >> I'm not a lawyer, but I do know that the jurisdiction under which
21 >> the
22 >> information is contained and/or serves as the state of incorporation
23 >> (new mexico, IIRC?) will control any "involuntary" disclosures that
24 >> the
25 >> foundation will not have any discretion about.
26 > One of the side bits that was done many years ago, was to put certain
27 > things outside of the US however, to take potential advantage of more
28 > local privacy laws. For example, Forums lives in Vancouver, BC,
29 > Canada,
30 > and is thus subject to BC privacy laws, which are very strong. If the
31 > data is located there, can take precedence over other jurisdictions,
32 > at
33 > least according to some BC lawyers.
34 >
35 > If nothing else, it's sufficiently complex privacy law to muddy the
36 > waters over data transfer.
37
38 And this is exactly why members of the gentoo community should be made
39 aware of any laws that may apply.
40
41 This is exactly why my opinion is strongly in favor of having the
42 situation, whatever it may actually be, documented so that people who
43 might get burned by having their stuff exposed by legal action will at
44 least have advanced warning.
45
46 > --
47 > Robin Hugh Johnson
48 > Gentoo Linux: Dev, Infra Lead, Foundation Trustee & Treasurer
49 > E-Mail : robbat2@g.o
50 > GnuPG FP : 11ACBA4F 4778E3F6 E4EDF38E B27B944E 34884E85
51 > GnuPG FP : 7D0B3CEB E9B85B1F 825BCECF EE05E6F6 A48F6136
52 >

Replies

Subject Author
Re: [gentoo-project] Comrel Improvements: Expectations of Privacy "Robin H. Johnson" <robbat2@g.o>