Educause Security Discussion mailing list archives
Re: Saymine Technologies (Mine) and requests to erase all personal data
From: Adam Menos <amenos () ARTIC EDU>
Date: Mon, 3 Feb 2020 10:42:39 -0600
We did a couple weeks ago and to be honest I did not like the idea of having a 3rd party "acting on behalf" of an individual for a data erase request. Also, I do not know if using a 3rd party is even a proper mechanism to request ones data to be erased. Then comes the question of transcripts..if this person was a student ? Long story short, we did our due diligence and did not find the person in question in our records, I never did reply back to Mine. If anything else it was a good exercise to see how we handled GDPR requests. Good topic thanks for raising.. Adam Menos Director of Information Security 116 S Michigan Ave | Chicago, IL 60603 *Office:* 312.499.4031 *amenos () artic edu* <amenos () artic edu> On Mon, Feb 3, 2020 at 10:35 AM Pat Falcon <patricia_falcon () brown edu> wrote:
We had a question today from one of our administrative offices about the legitimacy of an email they received from Saymine (see below). While I agree that it's suspicious, Mine's website <https://saymine.com/about> seems to support their email. Digging a little deeper, though web searches didn't turn up much, I did find that they are a relatively new company, launched in the UK in late January according to Top Business Tech <https://tbtech.co/mine-the-start-up-revolutionising-data-ownership/>, plus Mine has a listing on Crunchbase <https://www.crunchbase.com/organization/saymine-technologies-mine#section-overview> . Has anyone else had any dealings with Mine or have any more information about them, or for that matter, received similar requests from others like this? Sorry for the cross-posting but I wasn't sure which of the two lists might be more pertinent. Pat Falcon *Computing & Information Services | Information Security Group* *Brown University | Box 1885 | isg () brown edu <isg () brown edu> **| * *she/her/hers * *| 401.863.9259* -------------- Original Message --------------- *From:* Mine [request () saymine com] *Sent:* 1/23/2020 10:27 AM *To:* <precollege () brown edu>[redacted] *Cc:* [redacted]; request () saymine com *Subject:* Data Subject Request from [redacted] under the GDPR Data Subject Request: Brown Request number: [redacted] Dear Sir/Madam, Saymine Technologies Ltd. d.b.a Mine (“*Mine*”), is contacting you on behalf of [redacted] (the “*Data Subject*”), regarding whom personal data is processed by Brown, in connection with the exercise of the Data Subject's rights under applicable privacy laws, including, but not limited to, the General Data Protection Regulation (“*GDPR*”) and the California Consumer Privacy Act (“*CCPA*”) (collectively, “*Applicable Privacy Laws* ”). *Background* The Data Subject registered to Brown, using the email address: [redacted]. Certain Personal Data concerning the Data Subject has been and is processed by Brown, and regarding which the Data Subject is entitled and willing to exercise such rights granted under the Applicable Privacy Laws. Mine is a platform enabling users to exercise their rights in their Personal Data and facilitating the submission of Data Subject Requests (“*DSR*”), on behalf of its users, and in accordance with applicable laws. [redacted] has registered to Mine, and has instructed Mine to submit the following DSR to Brown. *Please note that any further communications with [redacted] in connection with this request,shall be sent directly to **[redacted]**’s email [redacted].* *Data Subject Request* 1. The Data Subject hereby requests that Brown *erase any and all Personal Data* about the Data Subject it processes, without exception. 2. Following the complete erasure of such Personal Data, please provide confirmation that the Personal Data have been erased, without the possibility to restore or reconstruct the data, by sending such confirmation to the Data Subject's email address at: [redacted], and copying Mine, at request+4O2BRRI () saymine com Companies interested in directing this message to a different email address or discussing more ways of streamlining this process - contact us <https://u14508181.ct.sendgrid.net/wf/click?upn=TqVUCJXeGA5WuTTUFtSdr5WRq4ozpMiOOATCjWhuiq51Uhmk1WscGURa-2FTrLHnSd_4JZHQUjYoW9jsnr2z-2F7DRHtq9YhBrW21sbKPLdWAkau52EYMyXSuUfEyn6ZooKyPGMseYqvuWmduuJKv5p3HAtS5FdKbPgc4-2B3aOOxqVZq976MEPXy6aLJI2ZzxWXb3mdOuD2m23BqRvZbRraGZ6m53jLtEDNVG8tMGh46fnjmSqHnwzxO9tzdLPILREdW8GqbZTKRhbEgE38bQRMKFJ9nZO3gPTu9riW1eT0U4ueHw-3D> Regards, [image: mine logo] *Say Mine Technologies Ltd.* 23 Derech Begin Tel Aviv-Yafo, 6618356 Israel https://www.saymine.com/ <https://u14508181.ct.sendgrid.net/wf/click?upn=TqVUCJXeGA5WuTTUFtSdr6mUFnLyrHiomNf1Eh0tmKcrB8ZEJaduiL6YlJXnL-2BpiJOuTiv5YKJebWEFx5zdRkvTC6daueBuRvVEfb9o14RCBbSC3qFUvvqdRCvgFk2hNiGDiEvdAUh8MklJM-2FPN-2BSw-3D-3D_4JZHQUjYoW9jsnr2z-2F7DRHtq9YhBrW21sbKPLdWAkau52EYMyXSuUfEyn6ZooKyP7QL6v1LPIOJGn8-2BkzgLRQ4-2F-2FLG-2Blcp4RJi5JQQoJfijqs58k8svlw8tNWWDyWcoGfjNY-2FLfFuvYSUvTG1XyG9KP-2FbsLbPy8byoI1-2Fl-2Boq9eKw5lXHu1coGFGyc28rO8Sut-2FlEfdnzBIGwVgfuZXyHDAg-2BH8gmZS3EdkEDb3Dtmc-3D> Under the circumstances at hand, we believe that the Data Subject is entitled to have the personal data erased pursuant to one or more alternatives specified in Applicable Privacy Laws, including, inter alia, Article 17(1) of the GDPR and Section 1798.105 of the CCPA. Nothing in this email purports to exhaust any of the Data Subject's rights, claims, defenses or remedies. ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
-- Adam Menos Director of Information Security 116 S Michigan Ave | Chicago, IL 60603 *Office:* 312.499.4031 *amenos () artic edu* <amenos () artic edu> ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Saymine Technologies (Mine) and requests to erase all personal data Pat Falcon (Feb 03)
- Re: Saymine Technologies (Mine) and requests to erase all personal data Adam Menos (Feb 03)
- Re: Saymine Technologies (Mine) and requests to erase all personal data Darren Morris (Feb 03)
- Re: Saymine Technologies (Mine) and requests to erase all personal data Lovaas,Steven (Feb 03)
- Re: Saymine Technologies (Mine) and requests to erase all personal data Darren Morris (Feb 03)
- Re: Saymine Technologies (Mine) and requests to erase all personal data Adam Menos (Feb 03)