How very sweet. You did wonderful things there and I am not surprised, knowing John that he did that, though I had not seen it before.

It is surely a crazy decision. The fact it doesn't bother to explain how Article 9 is complied with at all is astonishing.

Awesome. At least for a certain kind of person :-).

I mean, I am sure if the GDPR had existed 1,000 years ago, Omar Khayyam would have said something like

A GDPR underneath the Bough,
A Jug of Wine, a Loaf of Bread—and Thou
Beside me singing in the Wilderness—
Oh, Wilderness were Paradise enow!

It is hard to imagine something more engaging than sitting thinking about the GDPR. Never a dull moment. Still A22 is a bit niche for non-academics right now. No point worrying about what we can't control. Enjoy the now.

More singing I suspect.

No. There's an element of "singing out" in there I suspect.

Only the first comes even close, but it is hopelessly wrong.

Electricity is woke it seems.

I have never had such a list sent to me. How extremely odd, I can't imagine doing it myself. Potentially if you were a junior colleague I might send you a list of things *you* had achieved, so you could see how amazing you were, but why blow my own trumpet?

As opposed to gross negligence that isn't your fault ("innocent gross negligence")? My mind boggles slightly in trying to think if that can even be given a useful meaning.

You would have to work through hundreds of pages to understand what you might have to do. Most would be irrelevant, but you'd still have to work through them.

I remember encountering the "equity court" argument in US discussions back in the late 1980s. It has a long history, but it does seem to have gained traction in the UK. Before I left, someone put up posters about your real name in Swindon (Town of the name Swindon etc etc).

Interesting. This is something yet to appear in draft legislation. If they do it by extending the definition of "public authority" there will be a secondary effect on lawful basis under GDPR .

#1 Data is only "personal" if it contains name, address, email, telephone and ID number #2 you can only process personal data with someone's consent #3 which you can obtain by inserting one line somewhere in your T&C's. #mythic_gdpr

Can you give them a nudge about how useful privacy notices can be for being transparent?

One might wonder whether they have controlled for articles which are behind paywalls, but of course I have no idea because the article is behind a paywall. Of course I haven't read it, and therefore I wouldn't link to it.