<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Yes,<div class=""><br class=""></div><div class="">Fatima is right.</div><div class=""><br class=""></div><div class="">Regards</div><div class=""><br class=""></div><div class=""><br class=""><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Humberto Carrasco Blanc<br class="">Abogado<br class="">Profesor Asociado Derecho Económico - Comercial<br class="">Universidad Católica del Norte - Coquimbo<br class="">LLM Queen Mary University of London<br class="">PhD University of Edinburgh</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline">
</div>
<div style=""><br class=""><blockquote type="cite" class=""><div class="">El 30-04-2018, a las 19:23, Fatima Cambronero <<a href="mailto:fatimacambronero@gmail.com" class="">fatimacambronero@gmail.com</a>> escribió:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">Eduardo,<span class=""></span></span></div><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;font-size:12pt;font-family:Cambria"><span lang="EN-US" class=""><span class=""> </span></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">This
statement is false in part. <span class=""></span></span></div><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;font-size:12pt;font-family:Cambria"><span lang="EN-US" class=""><span class=""> </span></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">It is
referring to the last paragraph of the <u class="">article 30 of the GDPR</u> that states:<span class=""></span></span></div><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;font-size:12pt;font-family:Cambria"><span lang="EN-US" class=""><span class=""> </span></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class=""><i class="">The
obligations referred to in paragraphs 1 and 2 shall not apply to an enterprise
or an organisation employing fewer than 250 persons unless the processing it
carries out is likely to result in a risk to the rights and freedoms of data
subjects, the processing is not occasional, or the processing includes special
categories of data as referred to in Article 9(1) or personal data relating to
criminal convictions and offences referred to in Article 10.</i><span class=""></span></span></div><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;font-size:12pt;font-family:Cambria"><span lang="EN-US" class=""><span class=""> </span></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">The
obligations referred to in paragraphs 1 and 2 are the maintaining of a record
of processing activities under the responsibility of the controllers and the
same obligation to the processor about this record of processing activities. <span class=""></span></span></div><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;font-size:12pt;font-family:Cambria"><span lang="EN-US" class=""><span class=""> </span></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">It means,
the firms which have 250 employees or less still have to comply with all GDPR
rules as standard but no with the referred obligations about the record of processing
activities (with the exceptions of the same article 30).<span class=""></span></span></div><p class="MsoNormal" style="margin:0cm 0cm 0.0001pt;font-size:12pt;font-family:Cambria"><span lang="EN-US" class=""><span class=""> </span></span></p><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">Best
Regards,<span class=""></span></span></div><div style="margin: 0cm 0cm 0.0001pt; font-size: 12pt; font-family: Cambria;" class=""><span lang="EN-US" class="">Fatima<span class=""></span></span></div>





<br class=""></div><div class="gmail_extra"><br class=""><div class="gmail_quote">2018-04-30 10:00 GMT-05:00 Eduardo Diaz <span dir="ltr" class=""><<a href="mailto:eduardodiazrivera@gmail.com" target="_blank" class="">eduardodiazrivera@gmail.com</a>></span>:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr" class="">Alan:<div class=""><br class=""></div><div class="">What about the part of the statements that smaller firms do not have to comply with the GRDP rules as a standard. Is it true? </div></div><div class="HOEnZb"><div class="h5"><br class=""><div class="gmail_quote"><div dir="ltr" class="">On Mon, Apr 30, 2018 at 10:50 AM Alan Greenberg <<a href="mailto:alan.greenberg@mcgill.ca" target="_blank" class="">alan.greenberg@mcgill.ca</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="">
GDPR generally applies to all businesses.<br class=""><br class="">
There is an exemption about not maintaining records of how data is used,
but if a person requests such a record, you would have to reconstruct it
after the fact. <br class=""><br class="">
I was not aware of any exemption on publishing why and how data is
collected and processed, but that may be ignorance on my part.<br class=""><br class="">
Alan</div><div class=""><br class=""><br class="">
<br class="">
At 30/04/2018 10:22 AM, Eduardo Diaz wrote:<br class=""><br class="">
</div><div class=""><blockquote type="cite" class="m_6992259376750652696m_-8967751290910751016cite">A friend of mine quoted the
following from an article written here (bullet #9):
<a href="https://government.diginomica.com/2018/01/22/gdpr-compliance-here-are-the-14-things-you-actually-need-to-do/" target="_blank" class="">
https://government.diginomica.<wbr class="">com/2018/01/22/gdpr-<wbr class="">compliance-here-are-the-14-<wbr class="">things-you-actually-need-to-<wbr class="">do/</a>
<br class=""><br class="">
<br class="">
</blockquote></div><div class=""><blockquote type="cite" class="m_6992259376750652696m_-8967751290910751016cite"><b class=""><i class="">"Smaller firms – those defined as hhaving 250 employees or
less – do not have to comply with all GDPR rrules as standard. If your
organisation falls into this band, there’s no need to have
documentation of why personal data is being collected and processed, the
information you’re storing or how long for. Smaller firms are not
required to maintain a record of processing activities unless this
carries a risk to the rights and freedoms of data subjects, it is a
regular occurrence, or it relates to certain data like criminal
convictions and offences."<br class="">
</i></b></blockquote></div><div class=""><blockquote type="cite" class="m_6992259376750652696m_-8967751290910751016cite"><br class="">
The question: Is this statement true or false. If false what 's the real
thing?<br class=""><br class="">
Thanks to whomever answers this.<br class=""><br class="">
-ed<br class=""><br class=""></blockquote></div><div class=""><blockquote type="cite" class="m_6992259376750652696m_-8967751290910751016cite">
Content-Type: text/plain; charset="us-ascii"<br class="">
Content-Transfer-Encoding: 7bit<br class="">
Content-Disposition: inline<br class="">
X-Microsoft-Exchange-<wbr class="">Diagnostics:<br class="">
<u class=""></u>        <u class=""></u>
1;YTOPR01MB0396;27:Ytj/<wbr class="">AIpssqiibmKnz50JsE2dlIuhl4mAZZ<wbr class="">7KgUS70r3MLVG2H5KbNLby1tvjuxmL<wbr class="">9xkihjOX8lTqRqdvkojOVcdFn+<wbr class="">7J6Rg9dLd4q6K0sBwFMmlBydtVxY/<wbr class="">DHJHtiGSJ<br class="">
X-Microsoft-Antispam-Message-<wbr class="">Info:<br class="">
<u class=""></u>        <u class=""></u>
Z0icQu+yvOTMi4oe2M5K8h3rXupR/<wbr class="">WWSGm7yxmyO/<wbr class="">qZWHZyK6igFkjfsOJ8Zvdr+<wbr class="">SypqAETDIqcyY01/<wbr class="">xxTWorzEcbGFCOU0ZJh44OAwgSSTfu<wbr class="">7epif694StzjXqCHQEoWJqrZLOQvKA<wbr class="">H1JvkHIcRi7scwaHt8PwvCirITtXjd<wbr class="">RNdJb9dw2QXEvB2r2Pol6vnyfj+<wbr class="">CoqdP/6R67D3vRK35H2W+<wbr class="">crSTRIVjKjWrgFIDYnC1d06+<wbr class="">3i59oO+<wbr class="">dGHw1Vwhuiu977GlToeSv5XpProXMg<wbr class="">oWCVNBZZJ+j+<wbr class="">vEq5FH1IKTZV8W1BohpSeFQXvXSHGh<wbr class="">LbcAL8WKH2Jqn4AkB9PsLeVIZYN/<wbr class="">ZNDXrKXjtf6mCJcPSDJjK+<wbr class="">VxHsUB4px4RlVEe54ay1Dy0rFX9vxi<wbr class="">eiG2ll4Dd2uFoQfPdGjTcedFQg+<wbr class="">mW9clPueIWcYO1lBuNZW1RVVwC4xRp<wbr class="">b/AE09YMbCVv/O8mMq9+2j+zhX/<wbr class="">7K9jf6ZLgTZ3NxwCkSoAmRhcQo0<br class="">
<br class="">
------<br class="">
NA-Discuss mailing list<br class="">
<a href="mailto:NA-Discuss@atlarge-lists.icann.org" target="_blank" class="">NA-Discuss@atlarge-lists.<wbr class="">icann.org</a><br class="">
<a href="https://atlarge-lists.icann.org/mailman/listinfo/na-discuss" target="_blank" class="">
https://atlarge-lists.icann.<wbr class="">org/mailman/listinfo/na-<wbr class="">discuss</a><br class=""><br class="">
Visit the NARALO online at
<a href="http://www.naralo.org/" target="_blank" class="">
http://www.naralo.org</a><br class="">
------</blockquote></div>

</blockquote></div>
</div></div><br class="">______________________________<wbr class="">_________________<br class="">
ALAC mailing list<br class="">
<a href="mailto:ALAC@atlarge-lists.icann.org" class="">ALAC@atlarge-lists.icann.org</a><br class="">
<a href="https://atlarge-lists.icann.org/mailman/listinfo/alac" rel="noreferrer" target="_blank" class="">https://atlarge-lists.icann.<wbr class="">org/mailman/listinfo/alac</a><br class="">
<br class="">
At-Large Online: <a href="http://www.atlarge.icann.org/" rel="noreferrer" target="_blank" class="">http://www.atlarge.icann.org</a><br class="">
ALAC Working Wiki: <a href="https://community.icann.org/display/atlarge/At-Large+Advisory+Committee+(ALAC)" rel="noreferrer" target="_blank" class="">https://community.icann.org/<wbr class="">display/atlarge/At-Large+<wbr class="">Advisory+Committee+(ALAC)</a><br class=""></blockquote></div><br class=""><br clear="all" class=""><br class="">-- <br class=""><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div style="text-align:left" class=""><i class=""><b class="">Fatima Cambronero</b></i><br class=""><div style="text-align:left" class="">Responsable del Área de Derecho Informático de R10S Abogados<br class=""><a href="http://www.riosabogados.com/" target="_blank" class="">www.riosabogados.com</a><br class="">México<br class=""></div><br style="" class=""></div><span style="" class="">Phone: México: +52 (55) 5252 2581<br class="">
Twitter: @facambronero<br class="">
Skype: fatima.cambronero</span><br class=""><br class=""><div style="padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; font-size: 10px; line-height: 130%; text-align: left;" class=""></div><div style="padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; font-size: 10px; line-height: 130%; text-align: left;" class=""></div><div style="padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; font-size: 10px; line-height: 130%; text-align: left;" class=""></div><div style="padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; font-size: 10px; text-align: left; line-height: 130%;" class=""></div><div style="padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; font-size: 10px; text-align: left; line-height: 130%;" class=""></div><div style="padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; font-size: 10px; text-align: left; line-height: 130%;" class=""></div></div></div></div></div></div></div></div></div>
</div>
_______________________________________________<br class="">ALAC mailing list<br class=""><a href="mailto:ALAC@atlarge-lists.icann.org" class="">ALAC@atlarge-lists.icann.org</a><br class="">https://atlarge-lists.icann.org/mailman/listinfo/alac<br class=""><br class="">At-Large Online: http://www.atlarge.icann.org<br class="">ALAC Working Wiki: https://community.icann.org/display/atlarge/At-Large+Advisory+Committee+(ALAC)</div></blockquote></div><br class=""></div></body></html>