European Union General Data Protection Regulation (GDPR)

[rgaiacs]

https://about.gitlab.com/gdpr/ says

The General Data Protection Regulation (GDPR) is a European privacy law that is set to go into effect in May 2018. The GDPR replaces the Data Protection Directive that was put into place in 1995. Although it is a European law, it will impact any entity that does business in or offers services and goods to people in the European Union (EU), regardless of their location. It will also apply to any entity that collects and analyzes the data of EU residents or businesses.

Because CarpentryCon is planned to happen on 30 May - 1 June, 2018 I think that someone from the organising committee should investigate what need to be done to respect the new regulation.

[mkuzak]

it's the very good point. Any GDPR expert around?

[jduckles]

In the case of CarpentryCon the registration at Eventbrite is the only thing that would fall under GDPR and it is opt-in. If you don't want to come, don't give us your information and book your travel :). We have no plans to retain the registration information, and will direct attendees to other opt-in channels for continued contact with them. As far as sensitive personal information, we retain names, contact information and teaching/event records.

We do not send/sell our data to any third-parties. We're undergoing a review and update of our privacy policy to ensure that it is GDPR compliant. We already have an opt-in contact policy for our mailing lists, and instructor training registrations. We'll be implementing internal procedures for GDPR compliance around the various personal rights required by GDPR.

[olexandr-konovalov]

I've heard from a colleague that IEEE advices something to their conference organisers. Found this link so far: http://ieeer8.org/news/new-gdpr-regulation-impacts-for-ieee-conferences/

[katrinleinweber]

What if people want to attend, but don't want to send their data to Eventbrite? This is what they write about the GDPR.

[tracykteal]

Thanks @katrinleinweber. We, along with many other organizations, are working to update processes in alignment with GDPR. As you note, Eventbrite is addressing this and there is the ability to delete user data. We will delete user data after the event, and provide only opt-in opportunities for future communication. As we continue to follow compliance guidelines, if you do want to discuss alternative forms of registration, please email team@carpentries.org or me personally.