• Draft agenda for reformation meeting (Was: Call for volunteers: Data Pr

    From Daniel Gröber@3:633/10 to All on Monday, January 05, 2026 14:10:01
    Subject: Draft agenda for reformation meeting (Was: Call for volunteers: Data Protection Team)

    Hi all,
    I've started an agenda pad for the reformation meeting if anyone has ideas
    or thoughts:
    https://cryptpad.fr/code/#/2/code/edit/nQGuHMvjookGvAhsIJW0wm11/
    Bart,
    On Mon, Jan 05, 2026 at 04:36:13AM +0100, Bart Martens wrote:
    Good point. However given how open Debian is anyone that wants to do this can already do this. Just talk to people! Post ideas to the debian-project list, maybe form an informal team and take it from there. No need for a delegation to get started.

    It is hard to convince our fellow-DDs all over the project to erase personal data from their systems without a formal delegation from the DPL.
    Once things are setup properly personal data members choose to copy onto
    their own system should fall outside our responsibilities IMO. We need to
    do is make it clear (and easy!) to handle data properly, by eg. keeping it
    on DSA administered systems where we can audit and ensure that it's being handled properly.
    Once that's clear doing anything that goes against such policy is no longer
    the project's legal responsibility, but the individuals'.
    Right now I think we lack that clear internal guidance.
    For example, "carnivore" is likely still processing personal data in ways that Debian does not really need, so must not have. I might some day find
    the time to have a look at it.
    We can and should always do better, but keep in mind that effort counts, at least when it comes to DPAs auditing organizations. Nobody expects us to
    just be perfect immediately.
    (I'm careful with making promises in volunteering work.)
    A hard learned lesson, I'm sure :-).
    Thanks,
    --Daniel


    --- PyGate Linux v1.5.2
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)