<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><div>From the paper:<br></div><div><br></div><div>> However, nothing explicitly states that personal data in metadata is distributed with our
geo-data, and a person who does not fully investigate OSMF’s APIs and data dumps would
not necessarily understand this.
In summary we currently lack both the explicit consent and contractual obligations to process
the personal data lawfully in all of the current ways we do so. The Contributor Terms and
Privacy Policy could be updated to explicitly describe and require affirmative consent to all
data processing.<br></div><div><br></div><div>I couldn't see that last point in the Recommendations. Is it not an option to simply be more explicit in the Contributor Terms that your username, timestamp, and geo-data which you are uploading to OSM is made publicly available? That would prevent any need to cut out metadata from the public apis, data dumps.</div><div><br></div><div>I can understand having in place a clear policy on what OSMF does with non-public data like user email, ip address, but OSM was designed to make the username and timestamp of all edits public.</div></div><br></div><div class="gmail_extra"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline">On 18 April 2018 at 02:23, Simon Poole<span> </span></span><span dir="ltr" style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><<a href="mailto:simon@poole.ch" target="_blank" style="color:rgb(17,85,204)">simon@poole.ch</a>></span><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;float:none;display:inline"><span> </span>wrote:</span><blockquote class="gmail_quote" style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial;margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div bgcolor="#FFFFFF">The GDPR applies to anybody either in the EU or processing data of EU residents, there is no reason that you can't run a hdyc like site outside of the EU (it would likely have to be in a country for which an equivalence determination has been made), as long as you adhere to the relevant regulations.</div></blockquote><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">I guess I'm trying to work out is there any way OSM communities outside the EU can avoid being caught up in this?</div><br class="gmail-Apple-interchange-newline"><br></div></div>