N Gauge Forum

Notices, Help With Problems and Your Forum Ideas... => Notices => Topic started by: Tank on May 09, 2018, 09:56:53 PM

Title: GDPR Compliance
Post by: Tank on May 09, 2018, 09:56:53 PM
Dear all,

We need to make sure that this forum follows the new GDPR regulations by the 25th May 2018.  To do this we need you all to accept the policy that we've put on the forum, otherwise we'll be forced to delete your accounts.

For more information - https://en.wikipedia.org/wiki/General_Data_Protection_Regulation

Many thanks for Only Me's help in setting this up.

Any problems them please say so here, or feel free to message myself or the team.
Cheers,
Tank.
Title: Re: GDPR Compliance
Post by: guest311 on May 09, 2018, 10:40:47 PM
no probs here, signed to stay with this great band of brothers

:NGF:
Title: Re: GDPR Compliance
Post by: RailGooner on May 09, 2018, 10:55:28 PM
 :thumbsup: :beers: Wish my work was as on the ball over this.
Title: Re: GDPR Compliance
Post by: jond on May 10, 2018, 08:26:11 AM
I get forced to accept the policy each time I access the forum from a difference device or browser.

Is the acceptance stored as a cookie or somewhere in the database ?  As it seems to behave like a cookie at the moment ?


Thanks
Title: Re: GDPR Compliance
Post by: austinbob on May 10, 2018, 08:35:51 AM
Quote from: jond on May 10, 2018, 08:26:11 AM
I get forced to accept the policy each time I access the forum from a difference device or browser.

Is the acceptance stored as a cookie or somewhere in the database ?  As it seems to behave like a cookie at the moment ?


Thanks
Same here... :beers:
Title: Re: GDPR Compliance
Post by: austinbob on May 10, 2018, 08:47:19 AM
different browsers seem ok its different devices that ask for acceptance.
:beers:
Title: Re: GDPR Compliance
Post by: jond on May 10, 2018, 08:56:23 AM
Quote from: Only Me on May 10, 2018, 08:40:13 AM
I blame the network............ I'll pop over and turn your screen off for you.. :D

The joys of working in the same office as @Only Me (http://www.ngaugeforum.co.uk/SMFN/index.php?action=profile;u=1328)  :)
Title: Re: GDPR Compliance
Post by: Bob Tidbury on May 10, 2018, 09:00:34 AM
I have to agree to the terms every time I want to view the Forum as well what do you have to do to stay on permanently ?
Bob Tidbury
Title: Re: GDPR Compliance
Post by: Bob Tidbury on May 10, 2018, 09:35:50 AM
 Only Me I    just remembered something you told me when I had a problem a while ago .
I turned the Amazon Fire off completely waited a minute then switched it back on , Forum comes up as normal now ,.
Cheers
Bob Tidbury
Title: Re: GDPR Compliance
Post by: Calnefoxile on May 10, 2018, 12:27:19 PM
Quote from: Bob Tidbury on May 10, 2018, 09:35:50 AM
Only Me I    just remembered something you told me when I had a problem a while ago .
I turned the Amazon Fire off completely waited a minute then switched it back on , Forum comes up as normal now ,.
Cheers
Bob Tidbury

Aaahhh that great IT solution to everything "Have you switched it off and on again" solves just about everything  :P :P :P :P :P

Cheers

Neal.
Title: Re: GDPR Compliance
Post by: robert06 on May 10, 2018, 08:20:53 PM
Happy to agree to the GDPR policy as described.
Title: Re: GDPR Compliance
Post by: terrysoham on May 25, 2018, 09:10:11 PM
Happy to agree to the GDPR policy as described
Title: Re: GDPR Compliance
Post by: Mr Sprue on May 28, 2018, 07:49:03 PM
For some reason I am getting slightly disorientated about all this. The past month or so I have had a barrage of bloody emails warning of GDPR and that I must act or have my details deleted from various databases.

So what do I do? Well I have clicked on links within these emails and only but a few contain a link for me to select to acknowledge and give permissions on my personal data.

As for the rest I fear a lot of information I receive in my mailbox is going to cease purely because a simple link saying "Click here to agree" or what ever wasn't there for me to select!

And yes NGF I agree to the GDPR as listed.

P.S So what happens when the UK leaves the EU then? :confused1:
Title: Re: GDPR Compliance
Post by: RailGooner on May 28, 2018, 08:04:43 PM
Quote from: Mr Sprue on May 28, 2018, 07:49:03 PM
..
P.S So what happens when the UK leaves the EU then? :confused1:

All EU legislation goes through our Parliament and is passed into UK law. So when we leave, this legislation and whole truck-load more, will stay UK law unless/until repealed.
Title: Re: GDPR Compliance
Post by: MJKERR on May 28, 2018, 08:50:42 PM
Quote from: Mr Sprue on May 28, 2018, 07:49:03 PM
I have had a barrage of bloody emails warning of GDPR and that I must act or have my details deleted from various databases

a few contain a link for me to select to acknowledge and give permissions on my personal data.

As for the rest I fear a lot of information I receive in my mailbox is going to cease purely because a simple link saying "Click here to agree" or what ever wasn't there for me
This is due to interpretation of the GDPR by each organisation

Basically, if you want to remain subscribed and there is a link use it

If you now receive an unwanted eMail, simply use the link provided AND the organisation MUST remove you

However, you may still receive eMail depending on your relationship with that organisation
If the content is important, then no link needs to be provided

Sadly I have now found some organisations are getting round this by moving their server from the EU to USA (for example)
Equally, some organisations have revised their website specifically for EU content, by removing any and all tracking scripts

It was all very similar when cookie consent was required previously, and that was swept under the carpet and replaced by a simple notice that there is now a cookie applied
Title: Re: GDPR Compliance
Post by: Mr Sprue on May 28, 2018, 08:55:11 PM
Quote from: MJKERR on May 28, 2018, 08:50:42 PM
Quote from: Mr Sprue on May 28, 2018, 07:49:03 PM
I have had a barrage of bloody emails warning of GDPR and that I must act or have my details deleted from various databases

a few contain a link for me to select to acknowledge and give permissions on my personal data.

As for the rest I fear a lot of information I receive in my mailbox is going to cease purely because a simple link saying "Click here to agree" or what ever wasn't there for me

Sadly I have now found some organisations are getting round this by moving their server from the EU to USA (for example)
Equally, some organisations have revised their website specifically for EU content, by removing any and all tracking scripts


So in a nutshell all a complete waste of time! That's polotricks for you. ::)
Title: Re: GDPR Compliance
Post by: broadsword on May 28, 2018, 09:12:21 PM
I agree to the GPDR as listed, however didn't receive any message,
perhaps because I no longer use the email provider I had when I joined
the NGF.
Title: Re: GDPR Compliance
Post by: Steve Brassett on May 28, 2018, 09:20:46 PM
Quote from: MJKERR on May 28, 2018, 08:50:42 PM

Sadly I have now found some organisations are getting round this by moving their server from the EU to USA (for example)
Equally, some organisations have revised their website specifically for EU content, by removing any and all tracking scripts


This shouldn't matter, as GDPR covers EU Citizens, no matter where the servers.  In fact, some US companies have temporarily stopped dealing with EU citizens until they can get their act together.
Title: Re: GDPR Compliance
Post by: daffy on May 28, 2018, 09:23:11 PM
I happily agree with the NGF GDPR.  Guess I must have already done it!  :hmmm:  I've had so many GDPR emails and even stuff in the post that I no longer know who I agreed what to and when. :confused1:

Quote from: Mr Sprue on May 28, 2018, 07:49:03 PM

P.S So what happens when the UK leaves the EU then? :confused1:

Now there's a multi-billion dollar question. :D
Title: Re: GDPR Compliance
Post by: Lankyman on May 28, 2018, 09:35:26 PM
I am confused, and it's not just my age. Like everyone else I have been bombrded with e-mails about GDPR. Many required me to follow a link to sign up that I agree with the new policy but others just invite me to check out changes to that organisations policy. But what do I have to dohere? Mr Sprue asked this question earlier in the thread but nobody has responded.

Several people have simply posted on this thread that they are happy with the Forum's privacy policy. Are we all expected to do that? Do the Mods have a responsibility to check that every member responds? But what is the policy and where is it? I know where the Forum Rules and Code of Conduct are and I do my best to comply but that was last updated in 2014 so there's been no change there as a result of the new legislation.

Maybe I am missing something but I haven't had a personal e-mail either privately or as a message on this Forum so I see nothing to sign up to. However, to be on the safe side because I am desperate not to be thrown  out of this wonderful Forum I will say publicly that am happy to the new GDPR policy.

Ron
Title: Re: GDPR Compliance
Post by: njee20 on May 28, 2018, 09:58:05 PM
Various things which were fine previously are no longer acceptable under GDPR - for example a pre-selected check box opting you into a newsletter. As such many people have required you to now actively consent, having previously not actually gained your consent.

Others have simply updated privacy policies to tell you how they're using your data, include a right to be forgotten as such. Basically everyone you have an account with should have contacted you in some shape or form, although action will not have been required on many.

I've seen several people saying about moving servers to the US to avoid the problem, but as said it's nothing whatsoever to do with the physical location of servers, rather the location of the people whose data they're holding. Quite intrigued to see which company gets the first monster fine for a breach or non-compliance!
Title: Re: GDPR Compliance
Post by: Lankyman on May 28, 2018, 10:13:41 PM
Thank you Only Me for your explanation. Not only was I confused it nows seems that I am suffering from loss of memory. I know this could be just an age thing but it could also be more something more serious. Having read the policy through the link you posted I can vaguely remeber reading that on some previous occasion so I must have signed up then.

Thank you for your kind patience with this old man. You and Tank really do a good job running this Forum and it is must seem a thankless task sometimes having to deal with old duffers like me but your efforts really are appreciated.

Ron
Title: Re: GDPR Compliance
Post by: MJKERR on May 29, 2018, 05:56:30 AM
Quote from: Lankyman on May 28, 2018, 09:35:26 PM
I am confused, and it's not just my age. Like everyone else I have been bombrded with e-mails about GDPR. Many required me to follow a link to sign up that I agree with the new policy but others just invite me to check out changes to that organisations policy. But what do I have to dohere? Mr Sprue asked this question earlier in the thread but nobody has responded.
Quote from: MJKERR on May 28, 2018, 08:50:42 PM
if you want to remain subscribed and there is a link use it
As above, it is all about how the organisation has interpreted what they are required to do and their interaction with any person within the EU
Some are requesting your consent, hence a link within an eMail
Some organisations do not like using these links within eMail so have provided a statement
Some organisations have updated their website or in extreme cases created additional websites
I have found at least three organisations who have moved their websites from servers in Europe to the USA, along with a small update to their privacy policy
Some organisations do not need to do anything, or only just update their privacy policy
Finally, some organisations have still not done anything!
Title: Re: GDPR Compliance
Post by: MJKERR on May 29, 2018, 06:11:12 AM
Quote from: njee20 on May 28, 2018, 09:58:05 PM
I've seen several people saying about moving servers to the US to avoid the problem, but as said it's nothing whatsoever to do with the physical location of servers, rather the location of the people whose data they're holding. Quite intrigued to see which company gets the first monster fine for a breach or non-compliance!
This is the issue, the ICO can really only pursue a commercial company (and they even admitted this a few weeks ago)
One of the organisations I am aware of that has simply moved their online content from Europe to the USA to avoid this issue is not a commercial company, but does make revenue from visitors to their websites in Europe

https://ico.org.uk/action-weve-taken/enforcement/?facet_type=Enforcement+notices
It takes about four months for full details to be published, so wait until about September to find out...
Title: Re: GDPR Compliance
Post by: daffy on May 29, 2018, 07:12:37 AM
Thanks for the detail and that link, MJKerr.

It is interesting to use the left hand tick boxes on the ICO page to show what Prosecutions and Monetary Penalties have been meted out in the past year. In a year from now I wonder how much that picture will have changed due to GDPR? :hmmm:


And I fully endorse what has been said by @Lankyman (http://www.ngaugeforum.co.uk/SMFN/index.php?action=profile;u=2088) . :thumbsup:
Title: Re: GDPR Compliance
Post by: Bramshot on May 29, 2018, 09:07:59 AM
Being thick this morning, where do I go to sign up? Don't think I have seen anything,unless it got lost amongst all the others in my brain.