Data privacy - TransAtlantic regulatory regimes and migrating meet. coop
A commons.hour
special
Date: Monday, May 22, 2023
Time: 18:00 London time. (European time = +1, N America Eastern time = -5, N America Pacific time - -8).
Venue: commons.hour room (@ DE server)
meet. coop intends to migrate to platform hosting by WebTV, a Canadian coop. This opens the possibility of choosing which data protection regulatory regime to be under - Canadian or European - or even operating under both regimes on different servers, and offering members the choice as part of the service we give. This commons.hour
aims to assemble the best knowhow that we have in our community, to underpin a sound strategic choice and highlight practical issues.
@petter @flancian and @anarcat have some inputs on this, but a bunch of others in our community have relevant knowhow (see Commons.hour special - data privacy - #5 by mikemh). Please do come and contribute. This is a significant strategic decision for meet. coop.
See ongoing discussion in this thread: Evolution #2 - A `commons.hour` on data privacy and regulatory regimes
Post-meeting documentation is below: Commons.hour special - data privacy - #11 by mikemh
2 Likes
Without getting into any spoilers, itâs important to be aware of politics in Canada before getting into this. This usually doesnât matter too much, but in this case it matters very much because last year a new privacy law came in effect in the canadian province of QuĂ©bec that is somewhat inspired (but even stronger on some aspects) by the GDPR.
All the documentation I have on this is unfortunately in french, but Iâll dump it here anyway in case people want to catch up with Google Translate or DeepL or ChatGPT or a friend or whatever it is people use these days:
https://blog.didomi.io/fr/quebec-loi-25-protection-donnees-cookies
sorry for the link dump, but itâs all i have. ):
Terrific @anarcat thanks lots. I use Deep-L these days, works well. Questions below are tactical questions for meet. coop. Shouldnât (?) necessarily shape the session too much, which ought to be a bit more broad, and âprinciplesâ based?
- My first reaction is that this is good news (that the Euro and Quebec regimes are basically similar, and going in the same direction).
- Second thought is: this still probably wonât affect the willingness of European public (governmental?) organsiations to have their data on ânon-Europeanâ servers (whatever that phrase means).
- And third - our members so far - none of them (?) governmental organisations - have been fine with the informal âGDPRâ claim we have made, so why would this change in the future?
- Fourth is: of course we have to step into a formal GDPR regime now (or GDPR-plus = Quebec). Itâs basic? Regardless of what our usersâ privacy consciousness may be?
- Finally: who do we expect our members to be in the future? Coops. Civil society informal organisations. Governmental organisations. Individuals. In Europe. In Canada. In USA. In other national jurisdictions?
Questions for @evolution team to form some views on. This is placing more emphasis on the âpreferncesâ section of the discussion?
These members might want to contribute? Do join this session.
I donât think I can join on Monday, apologies as Iâve been swamped lately!
1 Like
Here are machine translations into English, of the pages provided above by @anarcat : Nextcloud
Mostly, guides to data-holding organisations, about obligations under the new Quebec state law (âBill #25â) coming into force in stages between September 2021 and 2024.
Here a schema of data locations in meet.coop, to summarise topics that need discussing (âprotocolsâ), jurisdictions and digital spaces
The seminar I went to also listed Canada as approved by the EU âto some extentâ (which might mean Quebec, donât remember), but I agree with Mikeâs points.
Countries with an adequate level of protection
âą Andorra
âą Argentina
âą Faroe Islands
âą Guernsey
âą Isle of Man
âą Israel
âą Japan (under review)
âą Jersey
âą Canada (to some extent)
âą New Zealand
âą Switzerland
âą UK (reassessed after 2 years)
âą Uruguay
âą South Korea
1 Like