<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"Century Gothic";
panose-1:2 11 5 2 2 2 2 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">My response to Charlie was flagged as being too large for the list, so here it is again:<o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">Thank you, this makes a lot of sense. And my concern is indeed with users providing data directly to the publisher, and not the library passing data along (I can’t think of any instances where we do so). I had asked SpringerNature why
they wouldn’t obtain permissions at the point at which they request and obtain the data directly from users and they never really clarified this, which would have been helpful. I will discuss your suggestion with our legal folks. <o:p></o:p></p>
<p class="MsoNormal"> <o:p></o:p></p>
<p class="MsoNormal">-Leah<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> Charlie Rapple <charlie@growkudos.com> <br>
<b>Sent:</b> Tuesday, August 07, 2018 10:06 AM<br>
<b>To:</b> Donley, Leah <donley@bnl.gov><br>
<b>Cc:</b> Eril-l@lists.eril-l.org<br>
<b>Subject:</b> Re: [Eril-l] Personally identifiable information clause in SpringerNature license<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hi Leah,<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">This text will be there because of the new GDPR (General Data Protection Regulations) - if you were providing user data (e.g. email addresses) to the publisher, then as an EU company Springer Nature would need you to confirm that you had
the users’ permission to provide that data to parties such as Springer Nature. But if they only get your users’ data directly from users themselves (e.g. when users sign up for a SpringerNature account for things like email alerts) then you are right that
in that scenario it would be down to Springer Nature to obtain consent directly for any use of that data. So it comes down to whether you expect to provide any user records to Springer Nature - if not, then the text below wouldn’t apply. Either way the licence
text could be clarified to say "In the event that Licensor’s performance of its obligations under this License Agreement requires that Licensor receive or otherwise process any personal data of Authorized Users
<u>provided by the Licensee</u>” as that is the critical distinction here - whether they get that info directly from users (their responsibility to obtain user consents) or via you (your responsibility to have obtained those consents).<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I hope that helps / makes sense. Though I should add the usual caveat - I am not a lawyer!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">All the best,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Charlie.<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Century Gothic",sans-serif;color:black"><br>
</span><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:black"><br>
<br>
<o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</body>
</html>