Draft agenda for reformation meeting (Was: Call for volunteers: Data Protection Team)

Daniel Gröber <[email protected]> Mon, 5 Jan 2026 13:59:58 +0100

Newsgroups	gmane.linux.debian.devel.project
Message-ID	<gijrfwhyhjmxmwb37velvt4kjge7jnzqhkjoofro2utwgwn7wo@djnsr75q62x5>

Hi all,

I've started an agenda pad for the reformation meeting if anyone has ideas
or thoughts:

  https://cryptpad.fr/code/#/2/code/edit/nQGuHMvjookGvAhsIJW0wm11/

Bart,

On Mon, Jan 05, 2026 at 04:36:13AM +0100, Bart Martens wrote:
> > Good point. However given how open Debian is anyone that wants to do this
> > can already do this. Just talk to people! Post ideas to the debian-project
> > list, maybe form an informal team and take it from there. No need for a
> > delegation to get started.
> 
> It is hard to convince our fellow-DDs all over the project to erase personal
> data from their systems without a formal delegation from the DPL.

Once things are setup properly personal data members choose to copy onto
their own system should fall outside our responsibilities IMO. We need to
do is make it clear (and easy!) to handle data properly, by eg. keeping it
on DSA administered systems where we can audit and ensure that it's being
handled properly.

Once that's clear doing anything that goes against such policy is no longer
the project's legal responsibility, but the individuals'.

Right now I think we lack that clear internal guidance.

> For example, "carnivore" is likely still processing personal data in ways
> that Debian does not really need, so must not have. I might some day find
> the time to have a look at it.

We can and should always do better, but keep in mind that effort counts, at
least when it comes to DPAs auditing organizations. Nobody expects us to
just be perfect immediately.

> (I'm careful with making promises in volunteering work.)

A hard learned lesson, I'm sure :-).

Thanks,
--Daniel

signature.asc (application/pgp-signature, 833 B)