On Mon, May 21, 2018 at 7:03 PM Jason Hellenthal <jhellenthal@dataix.net> wrote:
Mind pointing out where in the GDPR that it directly relates to these types of mail services ?
Like most regulations, it doesn’t call out a specific thing like email or social networking sites or ecommerce. But it follows quite directly: GDPR covers processing of personal data of EU subjects. Email addresses are personal data. Article 14 says that if you receive personal data but not directly from the subject, you must notify the subject and provide them with a variety of information. There are exceptions for things like scientific studies and archival purposes... but not because it is simply inconvenient to do so. That this probably just isn’t going to happen for any email servers or search engine crawlers doesn’t mean the law doesn’t say what it says. Matthew