MISP
/
misp-noticelist
mirror of https://github.com/MISP/misp-noticelist
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #1 from circlsupportuser/master 

Add additional notices regarding GDPR
main
Alexandre Dulaunoy 2018-04-19 19:33:29 +02:00 committed by GitHub
parent 8e83fabe2d 7f769896c6
commit 1f70345ca6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 111 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

95
lists/gdpr/list.json
View File

@ -9,19 +9,104 @@
],
"notice": [
{
"scope": ["attribute", "object"],
"scope": ["attribute"],
"field": ["category", "meta-category"],
"value": ["Person"],
"value": [
"Targeting data",
"Attribution",
"Financial fraud",
"Social network",
"Person"
],
"tags": ["fpf:degrees-of-identifiability='explicitly-personal'"],
"message": {
"en": "processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’)."
"en": "This attribute is likely to contain personal data and the data subject is likely to be directly identifiable. Please verify that the processing of personal data is necessary and proportionate to the purposes (e.g. ensuring network and information security) and that you have a legal ground to share those personal data. Where applicable, please ensure that you have taken the necessary steps to ensure transparency towards the data subject in relation to the processing of their personal data."
}
},
{
"scope": ["attribute"],
"field": ["category", "meta-category"],
"value": [
"Antivirus detection",
"Payload delivery",
"Artifacts dropped",
"Payload installation",
"Network activity",
"External analysis",
"Support tool"
],
"tags": ["fpf:degrees-of-identifiability='potentially-identifiable'"],
"message": {
"en": "This attribute is likely to contain personal data and the data subject could be potentially directly identifiable. Please verify that the processing of personal data is proportionate to the purposes (e.g. ensuring network and information security) and that you have a legal ground to share those personal data. Where applicable, please ensure that you have taken the necessary steps to ensure transparency towards the data subjects in relation to the processing of their personal data."
}
},
{
"scope": ["attribute"],
"field": ["category", "meta-category"],
"value": [
"Persistence mechanism",
"Payload type",
"Other"
],
"tags": ["fpf:degrees-of-identifiability='not-readily-identifiable'"],
"message": {
"en": "This attribute is likely to contain personal data protected by additional safeguards and controls, but the data subject remains indirectly identifiable. Please verify that the processing of personal data is proportionate to the purposes (e.g. ensuring network and information security) and that you have legal ground to share those personal data."
}
},
{
"scope": ["attribute"],
"field": ["category", "meta-category"],
"value": [
"Internal reference"
],
"tags": ["fpf:pseudonymous-data='key-coded'"],
"message": {
"en": "This attribute may contain pseudonymised personal data, the data subject remaining indirectly identifiable. If personal data is contained, please ensure that the processing of personal data is proportionate to the purposes (e.g. ensuring network and information security) and that you have legal ground to share those personal data."
}
},
{
"scope": ["attribute"],
"field": ["type"],
"value": ["passport-number"],
"value": ["special-service-request"],
"tags": [
"gdpr:special-categories='genetic-data'",
"gdpr:special-categories='health'"
],
"message": {
"en": "adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);"
"en": "This attribute may contain special categories of sensitive personal data. If special categories of personal data are contained, please verify that the processing complies with GDPR Article 9 (2)"
}
},
{
"scope": ["attribute"],
"field": ["type"],
"value": ["passenger-name-record"],
"tags": [
"gdpr:special-categories='racial-or-ethnic-origin'",
"gdpr:special-categories='political-opinions'",
"gdpr:special-categories='religious-or-philosophical-beliefs'",
"gdpr:special-categories='trade-union-membership'",
"gdpr:special-categories='health'"
],
"message": {
"en": "This attribute may contain special categories of sensitive personal data. If special categories of personal data are contained, please verify that your processing activity comply with Directive (EU) 2016/681 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime. Additionally please verify that the processing complies with GDPR Article 9 (2)"
}
},
{
"scope": ["attribute"],
"field": ["type"],
"value": ["email-attachment", "attachment", "malware-sample", "comment", "text", "other", "target-user", "threat actor"],
"tags": [
"gdpr:special-categories='racial-or-ethnic-origin'",
"gdpr:special-categories='biometric-data'",
"gdpr:special-categories='genetic-data'",
"gdpr:special-categories='sex-life-or-sexual-orientation'",
"gdpr:special-categories='health'",
"gdpr:special-categories='political-opinions'",
"gdpr:special-categories='religious-or-philosophical-beliefs'",
"gdpr:special-categories='trade-union-membership'"
],
"message": {
"en": "This attribute may contain special categories of sensitive personal data. If special categories of personal data are contained, please verify that your processing activity complies with GDPR Article 9 (2)"
}
}
]