[IPOL discuss] French decree 2011-219 and "user identification"

[Nicolas Limare]

Hi everyone,

Almost 7 years after the original law[1] was passed, a decree[2] finally
details which information must be kept by services allowing users to
put, edit or remove some on-line content.

Because of the public experiment archives, IPOL must retain this
information for all the uploaded files in case a police officer asks
use the origin of an unlawful image. The information to keep is:
* IP address used to upload the file
* unique identifier locally attributed to this file
* upload date/time
This information has to be kept for one year.

All this information can be retrieved from the standard web server
logs, so no specific setting is needed. I added a paragraph about
these logs at the end of our "privacy policy" page[3].

[1] LCEN, http://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000000801164
[2] Décret n° 2011-219, http://www.legifrance.gouv.fr/affichTexte.do?cidTexte=JORFTEXT000023646013
[3] http://www.ipol.im/meta/privacy/

-- 
Nicolas LIMARE - CMLA - ENS Cachan    http://www.cmla.ens-cachan.fr/~limare/
IPOL - image processing on line                          http://www.ipol.im/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://tools.ipol.im/mailman/archive/discuss/attachments/20110321/b6ef426b/attachment-0001.pgp>