GDPR Compliance Chat Agenda – March 21

Welcome!

The WordPress coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. development team builds WordPress! Follow this site for general updates, status reports, and the occasional code debate. There’s lots of ways to contribute:

Found a bugbug A bug is an error or unexpected result. Performance improvements, code optimization, and are considered enhancements, not defects. After feature freeze, only bugs are dealt with, with regressions (adverse changes from the previous version) being the highest priority.? Create a ticket in the bug tracker.
Want to contribute? Get started quickly with tickets marked as good first bugs for new contributors or join a bug scrub. There’s more on the reports page, like patches needing testing, and on feature projects page.
Other questions? Here is a detailed handbook for contributors, complete with tutorials.

allendav 2:46 pm on March 20, 2018

Looking forward to the erasure discussion – right to erasure idea: could we automatically remove the IP Address and User Agent saved with coreCore Core is the set of software required to run WordPress. The Core Development Team builds WordPress. comments once a comment is approved? Akismet shouldn’t need it at that point. Plugins don’t have to wait for a right-to-erasure request to do the right thing.
- Pascal Casier 7:16 am on March 21, 2018
  
  Just wondering: Are there any statistics plugins that would show from what country people are commenting from? In that case I suppose they use that IP?
  - Stefan Kremer (stk_jj) 7:29 am on March 21, 2018
    
    have a look at that: https://github.com/pluginkollektiv/antispam-bee/blob/master/antispam_bee.php#L1376
    - Stefan Kremer (stk_jj) 7:35 am on March 21, 2018
      
      By the way: this is mandantory and with an advice on privacy linked pre ticking this
Tom van M 3:26 pm on March 20, 2018
Perhaps knocking down an open door for others, some more info
;
I called the Dutch Autoriteit Persoonsgegevens (Authority Personal Data) to ask them what is needed to make a website compliant to GDPR or AVG (dutch).

Every website needs a privacy statement

Every contactform or commentbox needs a extra checkbox where the visitor agrees with the privacy statement. Unchecked by default.

Most websites need a cookie that holds cookies untill the visitor approves.

And httpsHTTPS HTTPS is an acronym for Hyper Text Transfer Protocol Secure. HTTPS is the secure version of HTTP, the protocol over which data is sent between your browser and the website that you are connected to. The 'S' at the end of HTTPS stands for 'Secure'. It means all communications between your browser and the website are encrypted. This is especially helpful for protecting sensitive data like banking information., but that shouldn’t be new to most.

Besides that a site and/or business owner needs:

processor agreements for all companies who process user data, like Office 365, MailChimp, hostingcompany, telephone company etc.

a register of processing activities; registering all companies who process data, the risks, security measurements, right to delete data etc.

Calamity plan data leaks; a plan with who to call when a leak appears, who is going to make the calll, reaction time etc.
- Pascal Casier 7:17 am on March 21, 2018
  
  Goede morgen Tom,
  
  I agree with the first 3 items, but I need to recheck about httpsHTTPS HTTPS is an acronym for Hyper Text Transfer Protocol Secure. HTTPS is the secure version of HTTP, the protocol over which data is sent between your browser and the website that you are connected to. The 'S' at the end of HTTPS stands for 'Secure'. It means all communications between your browser and the website are encrypted. This is especially helpful for protecting sensitive data like banking information.. I don’t remember having seen this as a requirement. Thanks for pointing it out.
  - Stefan Kremer (stk_jj) 7:25 am on March 21, 2018
    
    httpsHTTPS HTTPS is an acronym for Hyper Text Transfer Protocol Secure. HTTPS is the secure version of HTTP, the protocol over which data is sent between your browser and the website that you are connected to. The 'S' at the end of HTTPS stands for 'Secure'. It means all communications between your browser and the website are encrypted. This is especially helpful for protecting sensitive data like banking information. is indeed needed in terms of having a safe procedure (privacy by design)
Stefan Kremer (stk_jj) 6:56 am on March 21, 2018

I wonder if there will be an inbetween-release for GDPR purposes til May 25th? Or will it be a minor releaseMinor Release A set of releases or versions having the same minor version number may be collectively referred to as .x , for example version 5.2.x to refer to versions 5.2, 5.2.1, 5.2.3, and all other versions in the 5.2 (five dot two) branch of that software. Minor Releases often make improvements to existing features and functionality., which will be backported like any other security issuesecurity issue A security issue is a type of bug that can affect the security of WordPress installations. Specifically, it is a report of a bug that you have found in the WordPress core code, and that you have determined can be used to gain some level of access to a site running WordPress that you should not have.?
- Pascal Casier 7:25 am on March 21, 2018
  
  Hi Stefan,
  
  As you can see in the minutes on https://make.wordpress.org/core/2018/03/15/dev-chat-summary-march-14th-4-9-5-week-6/ , there will be some pieces in 4.9.5 and then probably in 4.9.6 and .7 :
  
  @pento: about GDPR, there may be some smaller things ready for 4.9.5, but it will probably needs a 4.9.6/7 release towards the end of April or early May to add all the bits and pieces.
  
  Pascal.
  - Stefan Kremer (stk_jj) 7:31 am on March 21, 2018
    
    Thanks Pascal – what about the backporting? Though not recommended having an old (stable) version up and running I’m still in need of having my site GDPR conform.
    - Pascal Casier 7:49 am on March 21, 2018
      
      That would be a question for the #gdpr-compliance channel on the international slackSlack Slack is a Collaborative Group Chat Platform https://slack.com/. The WordPress community has its own Slack Channel at https://make.wordpress.org/chat/. 🙂

Comments are closed.

Welcome!

Communication

Share this: