GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Monday, 29-Jul-2024 00:02:11 JSTRyan Castellucci :nonbinary_flag:Ryan Castellucci :nonbinary_flag:

    Cis allies in the UK: Send HMRC a GDPR right to erasure request to remove your gender! Template request:

    Dear Data Protection Office,

    As you are no doubt aware, Article 17 of the Data Protection Act 2018 (UK GDPR) grants a "right to erasure".

    It is my understanding that HMRC, jointly with DWP, has records of my gender. I also understand that HMRC claims a "legitimate interest" basis for processing these records, however neither HMRC nor DWP have been able to cite any specific legislation or regulations that currently require that information.

    According to ICO guidance "It is not enough to rely on vague or generic business interests." and. You must think about specifically what you are trying to achieve with the particular processing operation.". Furthermore, when relying on this basis, your processing must be weighed against the individual's interests, rights, and freedoms.

    Gender is a very personal matter to me, and UK courts have repeatedly reaffirmed that it is covered under Article 8 of the Human Rights Act 1998, which protects my "right to respect for [my] private and family life".

    Since the UK fully equalized pension ages in 2019, there is no clear, widely applicable need for HMRC or DWP to process gender information. ICO guidance states that information processing relying on a legitimate interest basis "must be a targeted and proportionate way of achieving your purpose".

    Processing gender information for every taxpayer is neither targeted nor proportionate. If there were some obscure circumstances where this information were required, HMRC and/or DWP could accomplish their compliance goals in a targeted and proprotionate way by only requesting and processing gender data as needed.

    As complying with my request will require you to identify my records, I am providing my details here:

    Name: ____
    Date of birth: ____
    National Insurance Number: ____
    Address: ___

    Sincerely,

    Email to: advice.dpa@hmrc.gov.uk

    If they refuse, complain to your MP.

    In conversationabout 10 months ago from infosec.exchangepermalink

    Attachments


  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.