• Arbitrations
• a20110131.1

• Case Number: a20110131.1
• Status: Closed
• Claimants: Olivier F
• Respondents: CAcert

• Case Manager: LambertHofstra

• Arbitrator: UlrichSchroeter

• Date of arbitration start: 2011-02-04
• Date of ruling: 2011-02-26
• Case closed: 2011-02-26
• Complaint: Account Removal
• Relief: TBD

Before: Arbitrator UlrichSchroeter (A), Respondent: CAcert (R), Claimant: Olivier F (C), Case: a20110131.1

History Log

• 2011-01-31 (issue.c.o) case [s20110131.25]
• 2011-02-03 (A): added to wiki, request for CM / A
• 2011-02-03 (A): I'll take care about this case as (A)
• 2011-02-04 (CM): I'll take care about this case as (CM)
• 2011-02-04 (A): init notification to (C) with deadline set to 2011-02-18
• 2011-02-04 (A): request to (Support) for Assurances Rcvd/Given of (C)
• 2011-02-04 (C): confirms Delete Account Request
• 2011-02-12 (Support): [s20110204.4] sends list of assurances rcvd/given by (C)
• 2011-02-13 (A): offer to (C) to choose between 2 options, a) to keep the CAP forms for 7 years, or b) to send in the CAP forms. Added long explanations
• 2011-02-21 (A): sending short reminder to (C)
• 2011-02-21 (C): first message was categorized as spam. Choice is: continue with option b)
• 2011-02-21 (A): request to (C) to send in 6 CAP forms in an envelope to the given address of (A)
• 2011-02-25 (A): CAPs rcvd. Notification to (C) sent.
• 2011-02-26 (A): Intermediate Ruling, sent to (C), and (Support) for Execution
• 2011-02-26 (Support): [s20110226.49] account info missing in request
• 2011-02-26 (A): resending exec request to (Support) with account info of (C)
• 2011-02-26 (Support): [s20110226.49] Intermediate ruling Exec report

Original Dispute, Discovery (Private Part)

• Link to Arbitration case a20110131.1 (Private Part)

Discovery

• User is Assurer, has 6 Assurances given

Intermediate Ruling

By following procedure of similiar case a20110110.1, I hereby give an intermediate ruling:

• (C) accepts he wants to send the CAP forms in.
• (C) has sent in the CAP forms to (A)

• So here I'm following the deliberations of Arbitration cases a20080702.1, a20090618.3 and a20090328.1

  1. A snapshot of the account information shall be taken, including checking state of Certs (Clients certs? GPG/PGP Keys? Server Certs?) and printed on paper (to PDF by Support, to paper by Arbitrator with the Arbitration case paperwork)

  2. All certificates of the claimant shall be revoked and login to the account shall be disabled.

  3. The account of the claimant shall be anonymised by following the Delete Account procedure by a SE v2

Frankfurt/Main, 2011-02-26

Discovery II

• 2011-02-26 (Support): [s20110226.49] Intermediate ruling Exec report
  • 0 client certs
  • 0 domains
  • 0 server certs

Ruling

1. The users account should be anonymized and deleted as requested by the Claimant.
   1. Support has executed the "Delete my Account" procedure steps thru intermediate ruling execution
2. The arbitrator shall print this case-file to paper
3. The arbitrator shall put the print-out of this case-file, the print-out of the account status as well as the CAP forms into an opaque envelope and seal that envelope.
4. The arbitrator shall designate that envelope with the arbitration number and retain this envelope for 7 years, after last Claimants assurance was given. After which time it shall be destroyed.

5. CCA termination calculation (as per Arbitration Case - Delete Account Request - Proposal Procedure for Arbitrators - Step 8 calculation procedure:

   • 0 Certs: no specific CCA termination date to set
   • Last Assurance given: 2008-02-07 + 7 years = 2015-02-06
   • CCA termination date set to: 2015-02-06

Clarifications

1. The sealed envelope may be opened only
   • if one of the included CAP forms is requested during an Arbitration, or
   • if a dispute is filed against the Claimant and an Arbitrator rules that the Claimant's personal data is needed.
2. If the envelope is opened the ruling Arbitrator or the archiving Arbitrator shall send a mail to the Claimant's archived primary email adress about the circumstances. No further efforts will be made if this email adress is unreachable for any reasons.
3. The opening of the sealed envelope does not by default prolong the retention period.
4. An Arbitrator may rule that specific CAP forms shall be removed from the envelope and be archived otherwise (usually with another case, maybe for longer period).

5. The retention period is 7 years from the date of the ruling since the Claimant's personal data have to be archived for this period (see also Paragraph 5.5 of the CPS DRAFT p20091108). It is not sensible to open the envelope every time one of the CAP forms reaches the end of its individual retention period.

6. The envelope may be forwarded to another Arbitrator if the archiving Arbitrator resigns from CAcert or is not able to keep it save any longer. Of course the retention period is not modified by such a forwarding.
7. However the account removal request has been executed and the risks about Risks/Liabilities/Obligations (R/L/O) as defined by CCA has been decreased to a minimum as Claimant has sent-in his CAP forms (those are mostly topic for the risks, liabilities and obligations in another Arbitration case) the user is still bound to the CCA until the CCA termination date set.

Frankfurt/Main, 2011-02-26

Execution

• 2011-02-26 (A): final ruling and exec report sent to (C), (CM)
• 2011-02-26 (A): ruling step 2. I've printed-out this case-file to paper
• 2011-02-26 (A): ruling step 3. I've put the print-out of this case-file, the print-out of the account status as well as the CAP forms into an opaque envelope and sealed that envelope.
• 2011-02-26 (A): Case closed.

Similiar Cases

see also: Arbitrations Training Lesson 20 - Arbitration Case - Delete Account Request

• CategoryArbitration

• CategoryArbCaseAccountDelAssurer