GDPR privacy by design
Posted
#3051
(In Topic #552)
Standard member

I have to inplement the new eu gdpr policies and it got me thinking about composr.
Generally i think its in quite good shape with the cookie notices, opt-out and the encryption of the forums through the pem key files.
However what is the situation of encryption of all users profile data like name address email postcode etc.
This would be amazing if it could be implemented and would also need a one time encrypt to lock down existing data.
Any thoughts?
Posted
Site director

I just Googled around a bit and saw a lot of very vague speak from companies selling stuff.
I think probably improvements could be made regarding easy deletion and easy export of user data.
Regarding encryption, I didn't see a lot about that. Would not just running off an encrypted partition serve the purpose?
Encrypting at the DB level is not viable as you can't query it. Plus it would be an enormous amount of work. The encrypted CPFs are being handled as a special case.
Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon
- If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
- If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
- If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
- If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Posted
Site director

Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon
- If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
- If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
- If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
- If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
1 guest and 0 members have just viewed this.
