[AusNOG] Metadata retention... it's now (almost) a thing

[Paul Julian]

All great points Matt, the liability question is one we all need to consider probably, what risks will we be taking just running a business and trying to do the right thing ?
 
Regards
Paul
 
From: AusNOG [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Matt Perkins
Sent: Thursday, 30 October 2014 12:12 PM
To: 
Subject: Re: [AusNOG] Metadata retention... it's now (almost) a thing
 
If it's just source IP to username stuff im happy with that. It's just the radius logs after all. There seems to be a grey area around email. Let's see what happens there email logs  would not be the end of the world.  It's how much responsibility do we have for customer end points worry's me. For example. 

We provide a connection to customer X with a managed firewall. Customer X has 2000 employees and 1 Ip address that's internet facing. Are we required to be able to identify customer X's employee Y based on the IP. Or is it good enough to say it's customer X. 

The rest i dont really care about. We do it anyway for billing. However it does complicate my grand CGN idea... ( back to the old drawing board) 

Also what penalties are in place if we loose or otherwise for some reason not able to identify a customer. Could we go to jail for a hard disk crash ? What's the liability.

Matt.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20141030/52271332/attachment.html>