GDPR Compliance Chat Recap – February 21st

(full text on slack)

A centralised GitHubGitHub GitHub is a website that offers online implementation of git repositories that can easily be shared, copied and modified by other developers. Public repositories are free to host, private repositories require a paid subscription. GitHub introduced the concept of the ‘pull request’ where code changes done in branches by contributors can be reviewed and discussed before being merged by the repository owner. https://github.com/ folder was created to gather all info (Roadmap, knowledge base, tracTrac An open source project by Edgewall Software that serves as a bug tracker and project management tool for WordPress. tickets list, etc) while waiting for a final location: https://github.com/gdpr-compliance/info

@idea15 (webdevlaw on slackSlack Slack is a Collaborative Group Chat Platform https://slack.com/. The WordPress community has its own Slack Channel at https://make.wordpress.org/chat/) indicated that a privacy centre to hold GDPR information for site users, for site administrators/owners, and developers is being build. To be checked how this will be split between wordpress.orgWordPress.org The community site where WordPress code is created and shared by the users. This is where you can download the source code for WordPress core, plugins and themes as well as the central location for community conversations and organization. https://wordpress.org/ and wordpress.comWordPress.com An online implementation of WordPress code that lets you immediately access a new WordPress environment to publish your content. WordPress.com is a private company owned by Automattic that hosts the largest multisite in the world. This is arguably the best place to start blogging if you have never touched WordPress before. https://wordpress.com/

How 'other systems' deal with the request to see personal data can be found on https://github.com/gdpr-compliance/info/blob/master/KB.md#how-do-others-allow-users-to-download-their-own-data

A discussion was started if the GDPRWP.com interface is way to go and/or if CoreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. should provide actions & filters to provide means to plugins to report their personal data.

@allendav was pointing to https://github.com/allendav/wp-privacy-policy-shortcodes for possible shortcodes to expose privacy policy statements in a consistent way.

@schlessera pointed out that localization might be difficult to handle, how to avoid a mix of languages?

Current global idea is that plugins submit the info using hooksHooks In WordPress theme and development, hooks are functions that can be applied to an action or a Filter in WordPress. Actions are functions performed when a certain event occurs in WordPress. Filters allow you to modify certain functions. Arguments used to hook both filters and actions look the same./filters, the adminadmin (and super admin)/controller needs to 'accept' them so that enduser can see the full list, all based on versioning per pluginPlugin A plugin is a piece of software containing a group of functions that can be added to a WordPress website. They can extend functionality or add new features to your WordPress websites. WordPress plugins are written in the PHP programming language and integrate seamlessly with WordPress. These can be free in the WordPress.org Plugin Directory https://wordpress.org/plugins/ or can be cost-based plugin from a third-party..

Additional capabilitiescapability capability is permission to perform one or more types of task. Checking if a user has a capability is performed by the current_user_can function. Each user of a WordPress site might have some permissions but not others, depending on their role. For example, users who have the Author role usually have permission to edit their own posts (the “edit_posts” capability), but not permission to edit other users’ posts (the “edit_others_posts” capability). (like e.g. manage_compliance) could be needed.

#gdpr-compliance #summary