In article <01QJ5JK26GXI0005CZ@Encompasserve.org> you write:
| tl;dr
Too long: The regulation and articles are even longer.
Didn't Read: But you replied none-the-less ;-)
Having been talking to some actual lawyers about GDPR compliance, I find this analysis absurd.
Specifically about the right to be forgotten, it means that you have to be able to unsubscribe, i.e., the list operator forgets that you subscribed, but it does not mean that everyone has an arbitrary right to unsay anything they might later regret. I note that the putative analysis of Art. 17 skips over the exceptions which include archiving in the public interest.
There might be some tweaks to Mailman to make it easier to document who signed up and when, but for the most part it's not a big deal. Remember that when GDPR analyses talk about mailing lists, what they have in mind are broadcast lists (which is what 99% of lists are), not the discussion lists that Mailman runs.
R's, John