Hm, how about that. Email address are not personal data according to GDPR.
@finlaydag33k Now I read some more. If you have an email address that are like this: email@example.com, that are classed as personal data. But not firstname.lastname@example.org.
Indeed. If the email is "email@example.com" or "firstname.lastname@example.org" then it doesn't contain personal data and doesn't fall under GDPR.
But if the address is personal "email@example.com", then it's a personal data according to GDPR. (and it doesn't matter if the email is used in a private or work context, personal data is still personal data)
I’m confused. Are you saying that if the email address contains some portion of your name in the username, then it’s considered personal, such as firstname.lastname@example.org?
Or, are you just saying that if it’s not a general address (probably to a group), such as email@example.com, or firstname.lastname@example.org, then it’s personal?
So, for the following three email addresses, which of them would be considered PII?
Just the first one, or the first two?
GDPR says "
‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;"
So I wouldn't restrict personal data to just "name.surname" but to an email address that can identify a person. "vanecx" in my case, is my nickname, an email email@example.com is a personal data, from what I understand of this article. @danjones000 @finlaydag33k
@vanecx Mind explaining me an edge-case?
I use the email me(at)finlaydag33k.nl...
Would this be counted as "personal" data or?
Because "me" refers to well... me...
and finlaydag33k is obviously my handle...
In my understanding, it is not or less about whether an email address can be dissected in such a way that a real name or psydonym can be extracted, because process and results can be disputable.
Instead, it is (more) about whether that email, whatever it might be, is associated with an individual. If I'm the sole user of an email address, that email can be used to identify me as a person.
However, if you go to gdpreu.org, all email addresses are considered as personal data (I searched for it now). Source: https://www.gdpreu.org/the-regulation/key-concepts/personal-data/
@wizzwizz4 Swedish only, but here you go: https://www.imy.se/verksamhet/dataskydd/det-har-galler-enligt-gdpr/introduktion-till-gdpr/personuppgifter/
The information are not listed on their English version of imy.se.
Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.