GDPR

Privacy Legislation coming into effect on May 25th 2018 from the European Union.

Main issues:

• Right to access and be informed
• Right to rectification
• Right to be forgotten
• Right to data portability
• Right to restrict / object processing
• Breach notification

What others do

Position papers

• OSM: https://wiki.openstreetmap.org/wiki/File:GDPR_Position_Paper.pdf
• EasyRedmine: https://www.easyredmine.com/contacts/gdpr-compliance

Plugins, modules or extensions to the core software

• CiviCRM and GDPR (by Veda Consulting) Docs and GitHub repo for the extension: https://github.com/veda-consulting/uk.co.vedaconsulting.gdpr Note: this extension includes 'anonymizer' functionality
• Wordpress: https://wordpress.org/plugins/gdpr/
• Joomla!: https://extensions.joomla.org/extension/gdpr/

Adopt core software

• EasyRedmine

GDPR and MediaWiki

• https://phabricator.wikimedia.org/T194901
• https://etherpad.wikimedia.org/p/gdpr
• Marcus Glaser presentation at Wikimedia Hackathon - Barcelona 2018/05/19
• https://www.youtube.com/watch?v=uxTIpr4Ybcg

Links

• GDPR: https://gdpr-info.eu/
• Useful compliation of hotspots:

https://iapp.org/news/a/how-to-navigate-the-software-development-life-cycle-under-the-gdpr/

• Discussion on MW.org: https://www.mediawiki.org/wiki/Topic:Ucy8sfl44i6n6i51

The General Data Protection Regulation (Regulation (EU) 2016/679, abbreviated GDPR) is a European Union regulation on Information privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR is an important component of EU privacy law and human rights law, in particular Article 8(1) of the Charter of Fundamental Rights of the European Union. It also governs the transfer of personal data outside the EU and EEA. The GDPR's goals are to enhance individuals' control and rights over their personal information and to simplify the regulations for international business. It supersedes the Data Protection Directive 95/46/EC and, among other things, simplifies the terminology.