On Wed, Mar 16, 2016 at 04:12:23PM -0400, Scott O. Bradner <sob@xxxxxxxxx> wrote a message of 28 lines which said: > in addition “it is the right thing to do” No, the right thing to do is to never share personal data with third parties (and to put it in writing in the policy). That would make this paragraph useless (even if some local US law requires to keep it).