{"action":"created","issue":{"url":"https://api.github.com/repos/statonlab/Treesnap-website/issues/339","repository_url":"https://api.github.com/repos/statonlab/Treesnap-website","labels_url":"https://api.github.com/repos/statonlab/Treesnap-website/issues/339/labels{/name}","comments_url":"https://api.github.com/repos/statonlab/Treesnap-website/issues/339/comments","events_url":"https://api.github.com/repos/statonlab/Treesnap-website/issues/339/events","html_url":"https://github.com/statonlab/Treesnap-website/issues/339","id":341499442,"node_id":"MDU6SXNzdWUzNDE0OTk0NDI=","number":339,"title":"GDPR compliance","user":{"login":"mestato","id":508122,"node_id":"MDQ6VXNlcjUwODEyMg==","avatar_url":"https://avatars1.githubusercontent.com/u/508122?v=4","gravatar_id":"","url":"https://api.github.com/users/mestato","html_url":"https://github.com/mestato","followers_url":"https://api.github.com/users/mestato/followers","following_url":"https://api.github.com/users/mestato/following{/other_user}","gists_url":"https://api.github.com/users/mestato/gists{/gist_id}","starred_url":"https://api.github.com/users/mestato/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mestato/subscriptions","organizations_url":"https://api.github.com/users/mestato/orgs","repos_url":"https://api.github.com/users/mestato/repos","events_url":"https://api.github.com/users/mestato/events{/privacy}","received_events_url":"https://api.github.com/users/mestato/received_events","type":"User","site_admin":false},"labels":[{"id":989643645,"node_id":"MDU6TGFiZWw5ODk2NDM2NDU=","url":"https://api.github.com/repos/statonlab/Treesnap-website/labels/Discussion","name":"Discussion","color":"b60205","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-07-16T12:30:53Z","updated_at":"2018-09-12T14:45:16Z","closed_at":null,"author_association":"COLLABORATOR","body":"To Dos from meeting:\r\n- [ ] Users should be able to delete account, which will also delete their observations\r\n- [ ] Develop \"right to be forgotten\" policy (see discussion below)\r\n- [ ] Need to develop a scientist agreement that mentions their need to delete data if notified (in the law, we are controllers, they are processors). Maybe if we upgrade their account to \"scientist\", they receive an email with the policy and must agree to it to activate the new role?\r\n- [ ] Privacy policy needs to mention the ability to delete account and \"right to be forgotten\" policy\r\n- [ ] Test account deletion to make sure it really deletes everything\r\n- [ ] Email final policy to privacy@utk.edu, which includes lawyers that can review\r\n\r\nMore thoughts on \"right to be forgotten\". Since we aren't sure if a user's observations are on public or private land (possibly their own land), we probably need to also delete their observations. This would mean we also notify scientists to delete the user name and observations from their data downloads (and since we don't track who downloads data, we will need to email all scientists). The policy should also address how long data might persist in backups. However, I think deleting observations is unlikely to be successful - the issue of scientists actually knowing where all their downloads are is one thing, but the bigger problem is anyone could have grabbed the data via the API, which we aren't going to track. So if our privacy policy explicitly states that you are entering the data into the public domain by posting it, then we maybe don't have to deal with deleting observations at all? If we don't give away user names through downloads or the API this might work."},"comment":{"url":"https://api.github.com/repos/statonlab/Treesnap-website/issues/comments/420675475","html_url":"https://github.com/statonlab/Treesnap-website/issues/339#issuecomment-420675475","issue_url":"https://api.github.com/repos/statonlab/Treesnap-website/issues/339","id":420675475,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMDY3NTQ3NQ==","user":{"login":"almasaeed2010","id":1512664,"node_id":"MDQ6VXNlcjE1MTI2NjQ=","avatar_url":"https://avatars2.githubusercontent.com/u/1512664?v=4","gravatar_id":"","url":"https://api.github.com/users/almasaeed2010","html_url":"https://github.com/almasaeed2010","followers_url":"https://api.github.com/users/almasaeed2010/followers","following_url":"https://api.github.com/users/almasaeed2010/following{/other_user}","gists_url":"https://api.github.com/users/almasaeed2010/gists{/gist_id}","starred_url":"https://api.github.com/users/almasaeed2010/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/almasaeed2010/subscriptions","organizations_url":"https://api.github.com/users/almasaeed2010/orgs","repos_url":"https://api.github.com/users/almasaeed2010/repos","events_url":"https://api.github.com/users/almasaeed2010/events{/privacy}","received_events_url":"https://api.github.com/users/almasaeed2010/received_events","type":"User","site_admin":false},"created_at":"2018-09-12T14:45:16Z","updated_at":"2018-09-12T14:45:16Z","author_association":"COLLABORATOR","body":"Statement added at https://treesnap.org/privacy-policy"}}
{"actor":{"display_login":"almasaeed2010"}}