EFForg / EFForg/dnt-policy

User notification of legal requests, as a government team

Open
#9 6 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
50
Forks
9
PR merge metrics
No merged PRs in 30d

Description

The DNT policy says this about user notification of legal requests:

```
5. USER NOTIFICATION:

a. If we are required by law to retain or disclose user identifiers, we will
attempt to provide the users with notice (unless we are prohibited or it
would be futile) that a request for their information has been made in
order to give the users an opportunity to object to the retention or
disclosure.

b. We will attempt to provide this notice by email, if the users have given
us an email address, and by postal mail if the users have provided a
postal address.

c. If the users do not challenge the disclosure request, we may be legally
required to turn over their information.
```

As a government team, how should we think about this section? I'm not sure at all what the lay of the land is, legally or normatively, in terms of legal requests for user information that is intragovernmental.

If we were held to the standard above as written, I think we'd at least have to involve our general counsel to determine its applicability and reasonableness in our situation.

Contributor guide

No contributing guide indexed for this repository

Research direction

Review section 5 of the DNT policy, focusing on user notification for legally required retention or disclosure and the government-team context. Consult the general counsel concern raised in the issue and document a clear determination of the section’s legal and normative applicability to intragovernmental requests.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Documentation
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.