Security quotes of the week

Security quotes of the week

None of those are "purely personal or household activities."

But many of them don't require you to deal with other people's personal data at all, and even those that do generally won't involve your building up massive Facebook-style profiles of your users or sharing their personal data with third parties.

For example, if you operate a mailing list then all the personal data you need to deal with are people's e-mail addresses and possibly one string per user that they designate as their “name”. You don't need to share that data with anyone else. This means that your mandatory privacy statement etc. will be quite brief.

If you operate a web site where you “talk about your commercial consulting or photography efforts”, then unless you have some sort of commenting facility for users the only thing to watch out for are client IP addresses which your web server might log. Again, not a big deal; most web servers support a facility that will truncate or otherwise de-personalise client addresses in their log files. (If your “photograpy efforts” include publishing portraits of people then you need to make sure that the people in question are OK with this, but that would be required even without the GDPR.)

And so on. Of course if you deliberately invite other users to contribute to your site in some fashion then there are more i's to dot and t's to cross, but even that is not exactly rocket science.