Follow

Hm, how about that. Email address are not personal data according to GDPR.

@finlaydag33k Yepp. I was as surprised as what you were when I read it 😅

@finlaydag33k Now I read some more. If you have an email address that are like this: name.surname@domain.com, that are classed as personal data. But not something@domain.com.

@edgren @finlaydag33k Well, you read it wrong. Person-identifying email addresses are personal data; it's inboxes for job titles (e.g. info@) that aren't considered personal data.

@wizzwizz4 @finlaydag33k Yepp. I read it a few minutes later I read about non-personal email data 😅

@edgren

Indeed. If the email is "contact@yourcompany.com" or "sales@yourothercompany.com" then it doesn't contain personal data and doesn't fall under GDPR.

But if the address is personal "steve@yourcompany.com", then it's a personal data according to GDPR. (and it doesn't matter if the email is used in a private or work context, personal data is still personal data)

@finlaydag33k

@vanecx

I’m confused. Are you saying that if the email address contains some portion of your name in the username, then it’s considered personal, such as steve@domain.com?

Or, are you just saying that if it’s not a general address (probably to a group), such as webmaster@company.com, or sales@widgets.com, then it’s personal?

So, for the following three email addresses, which of them would be considered PII?

katherine@gmail.com
awesomedude@yahoo.com
marketing@yoyodyne.com

Just the first one, or the first two?

@edgren @finlaydag33k

@danjones000 @vanecx @finlaydag33k If the email address are like this: name.surname@domain.com or name@domain.com, that email adress will be classed as personal data. Otherwise, not personal data.

So, based on the 3 email address you mentioned, only the first one are considered as personal data.

@edgren
GDPR says "

‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;"

So I wouldn't restrict personal data to just "name.surname" but to an email address that can identify a person. "vanecx" in my case, is my nickname, an email vanecx@company.com is a personal data, from what I understand of this article. @danjones000 @finlaydag33k

@vanecx Mind explaining me an edge-case?
I use the email me(at)finlaydag33k.nl...
Would this be counted as "personal" data or?

Because "me" refers to well... me...
and finlaydag33k is obviously my handle...

@finlaydag33k @vanecx

In my understanding, it is not or less about whether an email address can be dissected in such a way that a real name or psydonym can be extracted, because process and results can be disputable.

Instead, it is (more) about whether that email, whatever it might be, is associated with an individual. If I'm the sole user of an email address, that email can be used to identify me as a person.

@edgren @wizzwizz4

@vanecx @danjones000 @finlaydag33k Your email address is not classed as personal data according to IMY 🙂 IMY = Swedish Authority for Privacy Protection.

However, if you go to gdpreu.org, all email addresses are considered as personal data (I searched for it now). Source: gdpreu.org/the-regulation/key-

@danjones000 @vanecx @finlaydag33k But email addresses like that are only considered personal data if that person are alive. If he or she are dead, that personal data will be classed as non-personal data.

@edgren > Exempel på personuppgifter är […] e-postadresser som förnamn.efternamn@företag.se.

Sign in to participate in the conversation
Fosstodon

Fosstodon is an English speaking Mastodon instance that is open to anyone who is interested in technology; particularly free & open source software.