Open for global business?

[GregHBBR]

Hi Jeremy,

Jeremy wrote

The potentially personally identifiable data that is pretty much always held by any forum package, and accessible to administrators/moderators can be IP addresses, together with email addresses, or so we were advised.  I've questioned this, given that some people will have dynamic IP addresses and some may use a VPN, but the legal advice was that it only takes one member to have an IP that is tied to their identity to make this personal data.

The key word there is "potentially"! It is the typical argument of a lawyer preying on fears and lack of knowledge in an effort to secure more business for themselves, much the same happened with the Y2K bug and more recently, web site cookies.

To obtain an IP address a forum administrator on a Nabble forum needs to customise the forum code for that specific purpose. It is not readily available in the standard product. There would need to be evidence that had been done.

In any case is a forum administrator even a Data Processor. They certainly aren't a Data Controller. Check out the terms and conditions. Everything we post is handed over to Nabble to do with as they like (I paraphrase a little).

Besides which the whole GDPR thing is, in our case, is almost certainly a red herring for another reason. This site is just a personal project of our Paul as a way for him to coordinate a group of personal friends who attend occasional gatherings to float their boats and as with all personal household activities, the UKHBBR forum will be exempt from the requirements of GDPR. To be subject to the GDPR there needs to be an organisation driving the collection of data.

This is all fascinating stuff, but undoubtedly annoying Chris because it doesn't help build that boat! :-)

[Jeremy]

Thanks Greg, there's clearly a big difference between different forum packages, as the one I help run displays the IP used for every post, together with a built-in geolocate function, to all forum staff (admins and moderators).  IPs are also displayed for any new membership application, along with a Google maps display of approximate location.

[The Q]

Some forums I belong to have a three part forum access.
The public can see anything in the public areas,
The approved new joiners can only post in that area,  for a probationary time or number of posts.
The full members,  have access to the full site.

In the private areas,  they have, for instance, details of who's going to meetings,  so the public can't find out unoccupied houses. Some allow political discussions about the subject with the priviso, if you become insulting and can't keep it civilised,  you'll get bumped out to the public area.

The three part forum sometimes mean you have two threads,  on a meeting,  one the announcement with information for non full members to attend and post meeting photos. The private thread the actual discussions on who why what people are attending..