GDPR

What is the GDPR, and how does it impact sites running MediaWiki software?

Privacy Legislation coming into effect on May 25th 2018 from the European Union.

Main issues:

• Right to access and be informed
• Right to rectification
• Right to be forgotten
• Right to data portability
• Right to restrict / object processing
• Breach notification

What others do

Position papers

• OSM: https://wiki.openstreetmap.org/wiki/File:GDPR_Position_Paper.pdf
• EasyRedmine: https://www.easyredmine.com/contacts/gdpr-compliance

Plugins, modules or extensions to the core software

• CiviCRM and GDPR (by Veda Consulting) Docs and GitHub repo for the extension: https://github.com/veda-consulting/uk.co.vedaconsulting.gdpr Note: this extension includes 'anonymizer' functionality
• Wordpress: https://wordpress.org/plugins/gdpr/
• Joomla!: https://extensions.joomla.org/extension/gdpr/

Adopt core software

• EasyRedmine

Code

• Search GitHub topics for "GDPR"

GDPR and MediaWiki

• Marcus Glaser's presentation at Wikimedia Hackathon - Barcelona 2018/05/19 - Presentation slides
• The Privacy extension provides users with a means to maintain their privacy and enables site maintainers to comply with the GDPR.
• Wikia has developed an extension to "Download Your Data"
• Wikia has developed a JavaScript project (using yarn for package management) for tracking opt-in
• https://phabricator.wikimedia.org/T194901
• https://etherpad.wikimedia.org/p/gdpr
• mw:Topic:Ud7xbwbzxcgyfgzm How to make a MediaWiki website "more" compliant to GDPR?
• mw:Topic:Ucy8sfl44i6n6i51 GDPR Compliance Discussion on MW.org
• GDPR (General Data Protection Regulation) and MediaWiki software

Links

• GDPR legislation
• Useful compilation of hotspots

The General Data Protection Regulation (Regulation (EU) 2016/679, abbreviated GDPR) is a European Union regulation on Information privacy in the European Union (EU) and the European Economic Area (EEA). The GDPR is an important component of EU privacy law and human rights law, in particular Article 8(1) of the Charter of Fundamental Rights of the European Union. It also governs the transfer of personal data outside the EU and EEA. The GDPR's goals are to enhance individuals' control and rights over their personal information and to simplify the regulations for international business. It supersedes the Data Protection Directive 95/46/EC and, among other things, simplifies the terminology.