body: Background: For roughly 2 decades I've run my own private email infrastructure for myself, open source projects, and a few other individuals over business internet service intended for such usage. I've recently run into a major German ISP blocking my site (this is a new thing; I used to send to their customers with no problem) and interrupting communication with one of their customers I need to correspond with.
  
  
  After a few weeks of back-and-forth with their email engineering contact giving me moving-goalposts/bait-and-switch about what they want me to do to get unblocked from their system, they are now insisting that I publish legal name and physical street address for the responsible party (that would be me personally) on the web as a condition to access their service.
  
  
  Is this sort of requirement legal under the GDPR? I could understand (while strongly objecting to, but that's not part of the legal question here) "sorry, we won't open our service to you", but making an offer to provide access but making it conditional on what amounts to doxing oneself seems like it should not be legal. Is this (demanding I publish it publicly rather than give them the same information privately) some loophole for skirting around the GDPR? Is there anything else legally sketchy about the demand?
  
  
  I am not in Germany; the other party involved is.
  
  
  More details copied from clarifying comments I posted on an answer (sorry, some of this is technical and may not be useful to non-IT folks):
  
  
  
  > 
  > The data was requested after a long series of individual email exchanges with their email engineering department (which has its own separate mail system that's not blocking my site). No emails were flagged as spam and no spam has ever been sent from my site to their mail system. (Fewer than 50 total emails have ever been sent from my site to them.) They seem to have instituted their own in-house policy for IP addresses to accept from based on IP block ownership data (note: not using any of the well-run RBL/DUL type lists) and allow-listing well-known sites.
  > 
  > 
  > Rejection takes place before the SMTP session even begins (error message prior to EHLO, giving the address of the email engineering department which I then contacted). Initial request was that I provide "full contact info" on webserver associated with domain the IP address reverses to in order to be unblocked, with no indication of what that would entail. Eventually after being (apparently intentionally) vague for a long time they started insisting that include physical street address. 
  > 
  > 
  > 
  
  
  Basically, the actionable thing I want to know is whether I have grounds to say something like "The offer to accept mail from my site under the conditions of having published physical contact information constitutes a solicitation for personal data protected by GDPR, and if you are soliciting such personal data, you are required by law to accept it via a secure and private channel."
  
  
  
title: Is it GDPR-compliant to require *public* publishing of personal info as condition for access to a service?