rust-italia / dgc

A parser and validator for the EU Digital Green Certificate (dgc) a.k.a. greenpass
https://github.com/rust-italia/dgc
MIT License
26 stars 11 forks source link

FYI: Legal use for this parser #30

Closed Enrico204 closed 2 years ago

Enrico204 commented 2 years ago

Hi!

Thanks for your work :-D

It would be useful to add a notice in the README specifying that the usage of software that reads and decode the DGC might be limited by national laws. For example, in Italy the "VerificaC19" app is the only generally available software authorized by the GPDP ("Garante per la protezione dei dati personali", the italian authority supervising data protection and processes) and the government 1.

While this library can be used in a lot of legal ways (e.g. research, special authorizations, etc), I think that it's wise to warn potential users about the fact that local laws might prohibit them to implement such "dgc readers" software.

Be safe :-)

lu-zero commented 2 years ago

We are not lawyers and the license chosen clearly states:

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR
OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.

If somebody wants to use our library in context that requires legal advice probably we could point to lawyers with such expertise.

Enrico204 commented 2 years ago

I was not suggesting to add legal statements. My suggestion was to add a simple but explicit note to help users to look for applicable laws. Something like "Note that laws in your country might regulate the use of software that decode DGC, please look for a legal advice".

The note inside the license is legally valid. However, users may don't know that there are some laws governing this specific aspect (DGC), and I think that it would be nice to help users avoid being prosecuted just because they go easy on this topic.

lmammino commented 2 years ago

I have mentioned something very high level in my codemotion presentation slides (https://slides.com/lucianomammino/a-look-inside-the-european-covid-green-pass#/67/0/2).

Screenshot 2021-11-29 at 14 10 27

@lu-zero, @Enrico204 (and everyone else), what's your opinion on adding a short section like this at the end of the README?

Enrico204 commented 2 years ago

I think that it's perfect :+1: