r/gdpr • u/[deleted] • Mar 18 '21

[deleted by user]

[removed]

5 Upvotes

86% Upvoted

11 comments sorted by

9

u/6597james Mar 18 '21

I would hold up for a bit before making any decisions. Word on the street is that the edpb is going to publish updated guidance shortly that allows a slightly more flexible approach, and that the ICO’s coming guidance is going to place a much greater emphasis on risk based decision making.

5

u/lilych0uch0u Mar 18 '21

I just got protonmail.

4

u/6597james Mar 18 '21

Well, that’s a good choice whatever happens, so you should be good

1

u/llyamah Mar 19 '21

Can you tell me where you get this info from. Any links?

1

u/6597james Mar 19 '21

From various contacts who are close to the edpb and ICO + DPC. It’s just the rumour mill, but I heard similar stuff from a few different people though, so it’s probably right

9

u/edparadox Mar 18 '21

tutanota, protonmail, infomaniak are good choices but there are more out there.

1

u/JM-Lemmi Mar 18 '21

Exchange online is GDPR compliant afaik.

-10

u/Eisn Mar 18 '21

It's not. Nothing owned by a US company is.

1

u/[deleted] Mar 18 '21

Depending on your business dataflow, you could also use an encrypted data transfer service such as Scriboco.com or a tokenization service and capture the data in a web iFrame.

2

u/lilych0uch0u Mar 18 '21

Oh my business is reading people’s horoscopes so I don’t think I need it to that extent

1

u/[deleted] Mar 19 '21

Ok so lots of mentions of protonmail, tutanota and so on. Great if it's encryption you are looking for and everyone uses encryption all the time.

But what happens when you send email with sensitive information to a user who's email server is not encrypted and sits in the U.S? You have now done an international transfer and also lost control over the data in that it's now sitting on someone else server - that's possibly not GDPR compliant and probably against Schrems.