#5139 - Add privacy data options to a member's profile / Assorted GDPR-related privacy management changes
-
By PDStig
- Added
- 6 views
| Identifier | #5139 |
|---|---|
| Issue type | Feature request or suggestion |
| Title | Add privacy data options to a member's profile / Assorted GDPR-related privacy management changes |
| Status | Open |
| Handling member | Deleted |
| Addon | core_privacy |
| Description | Do the following on a member's profile edit screen:
* Rename "delete" to something like "Account & Data". * Default to anonymising a member's data when they delete their account. * Add a tickbox under the "delete account" section specifying if a member also wants all of their data deleted (opposed to anonymised) when deleting their account. * Add an additional section allowing members to request downloading, deleting, or anonymising their data automatically. * Make note that any actions regarding their data will be processed using their current username / e-mail / IP address. It will not match previously-used e-mails, usernames, or IP addresses. If they wish to download / purge that data, they will need to contact a site staff. Also do the following: * Add a new config option specifying how long a member must wait in days before they can download their data again. Perhaps also add the ability to charge for the download of one's data (after the first download), which is permissible under the GDPR, if eCommerce and/or points is installed. * Add a new field (default is null) specifying the last date/time a member downloaded their data. If null, a member should be allowed to download their data for free at any time. Once a date is filled in, subsequent download is subject to the configured waiting period and can be charged. * On the Admin Zone privacy screen, add a field for specifying a member who is to be notified of the privacy action (and for download, a link to download the data). If the task queue is enabled, the task will be created under the specified member's behalf. * In privacy hooks, define a "human name" and a "description" for each database table. These are displayed to the member when they request which tables to download, delete, or anonymise. |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
What's the rationale for charging for data? Seems it is not really using significant resources so has no real cost to the webmaster, and is very tangential to Composr as a product (i.e. it's a very specific business model that I don't think many would have any interest in).
https://www.techrepublic.com/article/how-to-request-your-personal-data-under-gdpr/