[gdpr-discuss] Git and the Right for Rectification

[Winfried Tilanus]

On 05/21/2018 06:22 PM, Jonas Wielicki wrote:

Hi,

> So I was wondering about Git and the Right for Rectification. In contrast to
> the Right to be Forgotten, the Right for Rectification, does not have any
> exceptions I am aware of.

Correct, good point. But lets have a look at article 16 (Right to 
rectification):

---
The data subject shall have the right to obtain from the controller 
without undue delay the rectification of inaccurate personal data 
concerning him or her. Taking into account the purposes of the 
processing, the data subject shall have the right to have incomplete 
personal data completed, including by means of providing a supplementary 
statement.
---

The 'supplementary statement' are the most interesting words here. At 
places where it is technically impossible to change the data (e.g. in a 
paper archive or on not-changeable media) it is allowed to make the 
correction by adding a supplementary statement. This has been practice 
under old directive and will stay like that under the GDPR. Git is an 
example of a non-changeable medium. So adding a statement (read commit) 
with the correct information should be enough.

Winfried

-- 
privacy consultant e-health
+31.6.23303960
https://www.tilanus.com/