From: j4	Date: May 24th, 2004 11:01 am (UTC)		(Link)

It was in the context of a long rant about how we'd put their email address up in violation of the DPA (it was in the Graduate Prospectus, they should have been asked at the time whether they consented to their email address being on the web version as well as the paper version, and besides, they're the contact point for their department, so they bloody well should have their email address up on the web...) and the only solution to spam was not to put any email addresses on the web, ever.

	From: nja	Date: May 24th, 2004 03:34 pm (UTC)		(Link)

I think it's debatable whether work email addresses (and telephone numbers etc) are "personal data" under the DPA. Our advice is that if it's in the context of a role (e.g. admissions secretary) it's fine to put someone's email address or phone number on the web and they can't use the DPA to object.

20-30 spam messages taking half an hour to process? This moron is reading the things! I filter out about 90% of the spam, and the remnant is deleted just by looking at the subject line.

	From: j4	Date: May 25th, 2004 02:02 am (UTC)		(Link)

Our advice is that if it's in the context of a role (e.g. admissions secretary) it's fine to put someone's email address or phone number on the web and they can't use the DPA to object.

Is this advice documented on the web anywhere? It'd be useful to point people here at it if so.

This moron is reading the things!

That was the only explanation I could think of. But, I mean, FFS... "Oooh, what's this email? 'Fresh t33n fuc|< cam'... what's one of those? I'd better read it and see what needs to be actioned."

	From: nja	Date: May 25th, 2004 02:26 am (UTC)		(Link)

Verbal presentation, I'm afraid. The advice was that you can say "Please contact the admissions secretary by emailing xxx@yyy", but you can't say "Please contact Dr Zzzz the admissions secretary by emailing xxx@yyy" without permission because that links the email address to the person's name and it then becomes personal data. Same with phone numbers - Dr Zzzz can object to having his phone number on the web by his name, but if his phone number is the one to ring for admissions advice, he's got no grounds for objection provided his name isn't mentioned.

I think a lot of people open those emails from "Requirement Q. Algorithm" with no subject, which I bin unread. One of these days someone with a funny name is going to send me something important and I'll bin it without thinking.

	From: j4	Date: May 25th, 2004 02:53 am (UTC)		(Link)

Darn. This is all eminently sensible but unless it's written down the people round here won't give it the time of day.

I know what you mean about the funny-name emails. We got a genuine one from "Gaynor A. Hollander" which I nearly binned just today.

The other problem is that as webmaster we get all kinds of bizarre mails, in the text formatting equivalent of green crayon, from [whatever]@hotmail which usually go "PLEASE TO SEND ME FOR APPLY FORMS THE CAMBRIDGE DEGREE IN BANKING I HAVE DEGREE IN WHICH TO CONVERT ENLGISH AND AM HIGHLY SKILL IN ARTS" or "i cant access your website pls fix now urgent!!!!!!!" or similar, so it's quite hard to filter at all...

	From: nja	Date: May 25th, 2004 06:50 am (UTC)		(Link)

I deal with a lot of overseas students, so I'm used to genuine email from people with names like Abdul A Karim whose idea of a good subject is "YOUR URGENT ASSISTANCE REQUIRED". Sadly, none of the real people are offering me a share in a $25 billion fortune.

From: rmc28	Date: June 5th, 2004 03:48 am (UTC)		(Link)

It sounds like the sort of thing the CS web support people or the university DPA people should be documenting really, but I can't find much at either http://www.admin.cam.ac.uk/univ/dpa/ or http://web-support.csx.cam.ac.uk/

Martin Lucas-Smith gave a reasonable presentation on protecting email addresses from spam harvesters at the last web liaison meeting, but he's only got the one sentence about how you do actually need to have email addresses on web pages.