hi !!
>> on the 'Joining In' paragraph of your wiki you say "The data you send
>> will not violate anyone's provacy. I just need the IP address of the
>> server and if it is spam or nonspam", actually the spanish data
>> protection agency, based on european directives, considers ip addresses
>> as personal data, which means that they cannot be transferred to any
>> third party without previous consent of the user attached to the ip.
>> The implication of this is that if any spanish company or particular
>> sends some ip addresses to be blacklisted to your list it can be sued
>> by the user who has been blacklisted and will have to pay a considerable
>> amount of money. It would be good that you check if other data
>> protection agencies in the european union act in the same way and warn
>> your possible users about this. Sounds stupid and is stupid but it's
>> real.
>>
> I'm not asking for the IP address of the end user. It's the IP address
> of the host server. This is about tracking the karma of host servers,
> not end users.
when you blacklist an ip you don't know if it belongs to a end user
(usually zoombie machines) or to a real server, any way ANY ip address
is considered personal data here. I have a zoombie blacklist with about
400.000 ip addresses and i was considering about one year ago to make it
available via dns so i wrote a letter to the spanish data protection
agency asking if it was legal to do so or not. They clearly answered
that i could make such a list only for private use and that is is
illegal to share with others without prior explicit permission from the
user of each ip address.
--
Best regards ....
----------------------------------------------------------------
David Saez Padros http://www.ols.es
On-Line Services 2000 S.L. e-mail david@???
Pintor Vayreda 1 telf +34 902 50 29 75
08184 Palau-Solita i Plegamans movil +34 670 35 27 53
----------------------------------------------------------------
