[xp84]

If you made a list of all the people you hate with their pictures, should government regulators be involved with where you keep it and how you safeguard it? I don't feel like I would care even if I was on the list.

[hn_acc1]

I think it depends if you have: a) picture, legal name or b) picture, legal name, dob, all addresses/phone numbers/email addresses they have ever had, SSN, employers past and present, same info for spouse, kids, which schools they attended, who their friends / associates are, criminal history, etc, etc..

I can see that first one is "public information", more or less.

[EnergyAmy]

If you're doing that as part of a business, yes. If you're doing it personally, no.

[wongarsu]

In the EU, that list would be regulated under GDPR. Just as any other list with people on it. You would be allowed to have it, but storing it insecurely or giving people who don't need it access to it would be a violation

[xp84]

Thanks for the info. That sounds nuts to me and makes me glad I don't live in the EU. (Yes, I'm sure the EU is glad to not have me, too.)

Out of curiosity, who's the judge of who "needs" it though? If it's a list of my enemies, all my friends need it so they know who to glare at.