The RFC Editor respects the need to be responsible data stewards for the data entrusted to us by the authors of approved Internet Drafts, RFCs, and errata. As part of our work in editing and publishing RFCs, and posting errata as they apply to RFCs, the RFC Editor collects and uses personal information about the author. This is a normal and expected part of any professional publication process. The information collected includes:

Physical address and phone number (optional, and only in the case of RFCs)
Email address

The processing of this data is a necessary and understood aspect of professional publication. This data is only used for that purpose, and is publicly available as a result. The data is never sold. Therefore, we believe the collection and use of this data is covered by the Legitimate Interest justification of the General Data Protection Regulation, specifically Article 6(1)(f).

(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

For more information regarding the use of Legitimate Interest in the context of the GDPR, please see “Legitimate Interest”.