General Data Protection Regulation of the EU | Taking actions

gschwepp

Hi,
as I am looking for community software. I looked into discourse and so on, but they are huge installations that are too heavy for my needs. Now I found flarum and I am really pleased with what I see.

However I searched the forum and did not find any depth information about the General Data Protection Regulation (GDPR) or if and how you will address the regulation.

The reglation will be enforced at 25.05.2018 and will bring up some issues for most websites:

Nearly everyone needs a pesky cookie notification
In the Privacy Policy you need to inform the user what information your sites will store and so on.

Here a official list: https://www.eugdpr.org/key-changes.html

If you are already aware of this, you can just ignore this post.

Cheers

PS: Now its time for me to wait for the stable release.

clarkwinkelmann

gschwepp there are multiple solutions for the cookie banner including third-party banners that can be added via custom html and more recently a dedicated extension I believe.

As for the privacy policy, there isn't any built-in. It is yours to set up according to regulation ?

If somebody want to set up an extensive guide to make Flarum compliant that would be a wonderful idea !

gschwepp

Thank you for your answer.

As soon as I set up my instance I want to comply with the regulation. So I can document the process and published it here.

But as mentioned above this will happen with the stable release. I am short on time at the moment.

Cheers

TridentZ

gschwepp Have you been able to adapt the forum? I have read that we should put a check box with the privacy policy, but I do not know if in the login or when you send a message.

gschwepp

I currently do not have the time. And I got an hickup in my installation that I need to solve first.

Howevery, to your question:
As far as I know do you need a cookie notification as soon as the user enters your website. Regardless of the entry point to you website or if he is logged in or not.
Furthermore you need an link to you privacy policy in your site. At this point it is not clear if it must be always visible or if you just can put it into an subpage.

In another site (not flarum related) I just combined the Cookie and Privacy Notification that clearly states that the site uses cookies & is tracking the user activity. And of course a link with further information and an opt-out option for the tracking.

TridentZ

What you comment is really easy. Cookies can be inserted with cookieconsent.insites.com and the legal notice / privacy is placed with the plugin "links beta 0.1.0-beta6".

I believe that in Spain at least they are requesting a check box at the time of writing a post, enabling a check box with a link to privacy policy. Is there a plugin available for this task?

Johann

TridentZ I believe that in Spain at least they are requesting a check box at the time of writing a post, enabling a check box with a link to privacy policy.

First time I hear/read about this and it sounds very confusing. Is there any source/link?

clarkwinkelmann

The more I read about the GDPR the more clear it becomes that a dedicated extension to satisfy the law would be the ideal solution. This would also reinforce Flarum as a good candidate for forums in the EU.

I also saw the matter of giving users a way to know and access the data stored about them, which should likely also be available.

I'm willing to develop the extension (would then likely be published as a Flagrow extension) but I don't have the time to do it all for free.

Anybody's willing to sponsor the development of the extension ? If a few people pledge in, say 50EUR-100EUR we could get this ready in a few weeks. Let me know if you're interested by posting here or sending me an email (found at https://clarkwinkelmann.com/)