Likes: 
Disclaimer : IANAL.Origineel geplaatst door ICTRecht
Het is erg interessant. Ik ben hier al mee bezig geweest. Deze vraag speelt bij meerdere webhosters. Er zijn inderdaad een aantal juridische aspecten die problemen op kunnen leveren, bijvoorbeeld de privacy.
Ik kom hier later op terug.
Volgens mij is hierop de EU Privacy Directive van toepassing. Uit een samenvatting, (BOLD voor de meest relevante stukken),
Uit: http://www2.austlii.edu.au/~graham/PLPR_EU_1.htmlLegitimate processing
`Processing of personal data' (including collecting, recording, using and communicating it: A2(b)) is only lawful if it comes within one of the following conditions (A7):
(a) It is with the unambiguous consent of the data subject. Consent is only valid if the data subject receives prior notification of the purposes of collection and any proposed recipients, and may be withdrawn prospectively (A2(g)).
(b) It is necessary for the performance of a contract with the data subject, or for steps requested by the data subject prior to a contract[13]; or
(c) It is necessary to comply with a legal obligation to which the controller is subject;
(d) It is necessary to protect the vital interests of the data subject;
(e) It is `necessary for the performance of a task in the public interest or carried out in the exercise of public authority vested in the controller or in a third party to whom the data are disclosed' or
(f) It is 'necessary for the purposes of the legitimate interests pursued by the controller or by the third party or parties to whom the data are disclosed, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject ...'. Article 7 does not elaborate on how this balancing is to be achieved, but the preamble says that Member States remain free to determine the appropriate balance in relation to use of information for 'legitimate ordinary business activities' and conditions of disclosure for marketing purposes. The Commission commented on the 1992 draft that `[t]his balance-of-interest clause is likely to concern very different types of processing, such as direct-mail marketing and the use of data which are already a matter of public record'[14]. Many of the most contentious privacy decisions are therefore still left to the Member States to make.
These six very general conditions apply to both public and private sector processing of personal data. Their generality will obviously allow for a variety of specific implementations in national laws.
Use and disclosure - the `finality' principle
The principle of `finality' is that use and disclosure of personal information are limited to the original purposes of collection. The Directive retains[15] a general requirement that data must be used in a way compatible with the purpose of collection (A6(1)(b)), but lays out the above-listed six general grounds for processing (which includes use and disclosure) in A7, which act in part as justifications for exceptions to the principle of finality.
Overige,
http://www.loeb.com/CM/Articles/articles19.asp
http://www.cdt.org/privacy/eudirective/
De privacy directive is in 1995 aangenomen en lidstaten kregen 3 jaar de tijd om hun nationale wetgeving aan te passen. Wat er de laatste jaren mee gebeurd is weet ik niet, aaar misschien dat iemand anders daar wat feedback op heeft (*hint* *hint*).
Quote
Oorspronkelijk geplaatst door WilloW
Zal eens een slotje op jou zetten
