Comment 3 for bug 262193

Revision history for this message
James Troup (elmo) wrote : Re: [Bug 262193] Re: new location code allows anyone to set anyone else's location

Guilherme Salgado <email address hidden> writes:

> Is this still a problem if we send you a notification at the time
> (of a few minutes later) someone changes your location?

Yes, I believe it is. Location information when combined with the
other information we have for people (specifically name and email
address) constitutes 'personal data'. As such, allowing random people
to add personal data for other people is not a good idea, for several
reasons:

 * It's creepy when people that you don't even know add location
   information for you (and though this didn't happen to me, it is
   happening to other people I've talked to).

 * It shifts the burden of correctness (in a Data Protection
   legislation sense) onto us.

 * It's missing from and runs counter to parts of Launchpad's own
   published privacy policy.

 * The 'you can hide your location' argument implies that users have
   an obligation to monitor email from Launchpad in case Joe Random
   decides to publish their location information to the world. That's
   not a reasonable requirement, IMO.

--
James