{"action":"created","issue":{"url":"https://api.github.com/repos/frappe/erpnext/issues/13936","repository_url":"https://api.github.com/repos/frappe/erpnext","labels_url":"https://api.github.com/repos/frappe/erpnext/issues/13936/labels{/name}","comments_url":"https://api.github.com/repos/frappe/erpnext/issues/13936/comments","events_url":"https://api.github.com/repos/frappe/erpnext/issues/13936/events","html_url":"https://github.com/frappe/erpnext/issues/13936","id":320531535,"number":13936,"title":"To make ERPNext for GDPR ready","user":{"login":"krnkris","id":7963250,"avatar_url":"https://avatars1.githubusercontent.com/u/7963250?v=4","gravatar_id":"","url":"https://api.github.com/users/krnkris","html_url":"https://github.com/krnkris","followers_url":"https://api.github.com/users/krnkris/followers","following_url":"https://api.github.com/users/krnkris/following{/other_user}","gists_url":"https://api.github.com/users/krnkris/gists{/gist_id}","starred_url":"https://api.github.com/users/krnkris/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/krnkris/subscriptions","organizations_url":"https://api.github.com/users/krnkris/orgs","repos_url":"https://api.github.com/users/krnkris/repos","events_url":"https://api.github.com/users/krnkris/events{/privacy}","received_events_url":"https://api.github.com/users/krnkris/received_events","type":"User","site_admin":false},"labels":[{"id":593924275,"url":"https://api.github.com/repos/frappe/erpnext/labels/localization","name":"localization","color":"1d76db","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/frappe/erpnext/milestones/78","html_url":"https://github.com/frappe/erpnext/milestone/78","labels_url":"https://api.github.com/repos/frappe/erpnext/milestones/78/labels","id":3351379,"number":78,"title":"June 2018","description":null,"creator":{"login":"rmehta","id":140076,"avatar_url":"https://avatars1.githubusercontent.com/u/140076?v=4","gravatar_id":"","url":"https://api.github.com/users/rmehta","html_url":"https://github.com/rmehta","followers_url":"https://api.github.com/users/rmehta/followers","following_url":"https://api.github.com/users/rmehta/following{/other_user}","gists_url":"https://api.github.com/users/rmehta/gists{/gist_id}","starred_url":"https://api.github.com/users/rmehta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rmehta/subscriptions","organizations_url":"https://api.github.com/users/rmehta/orgs","repos_url":"https://api.github.com/users/rmehta/repos","events_url":"https://api.github.com/users/rmehta/events{/privacy}","received_events_url":"https://api.github.com/users/rmehta/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":0,"state":"open","created_at":"2018-05-16T10:56:45Z","updated_at":"2018-05-23T07:28:48Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2018-05-05T18:34:38Z","updated_at":"2018-05-24T04:47:07Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"To fulfil the requirement of GDPR for ERPNext.\r\n\r\nhttp://ec.europa.eu/justice/smedataprotect/index_en.htm3\r\n\r\nIt is really a must comply… don’t you think?\r\n\r\nSuggestion:\r\n\r\nA module gives end-user visibility to the data stored about himself/herself and aims to help site admins follows the guidelines and legislation set by the EU.\r\n\r\nBasic GDPR Compliance use cases:\r\n\r\n- [ ]  Form checkboxes (contact + login) - not accepted the form until not checked\r\n- [ ]  Pop-up alert (GDPR + privacy policy) - on login page +contact page\r\n- [ ]  Privacy Policy Page - separate from all other (must be separate)\r\n\r\nFeatures:\r\n\r\n- [ ] Checklist for site admin (recommend cookie consent, check if there is privacy policy page etc).\r\n    The primary goal is to prevent developers from accessing user data.\r\n\r\nHard coded features /is it important?/:\r\n- [ ] Adds data anonimization features so the data will still be available for statistical and history  purposes but will not allow to identify a user and the store will comply with the GDPR directive.\r\n\r\n- [ ] mask all the current data in your database related to the users.\r\n- [ ] could be really useful when considering the new GDPR legislation, as all the user data could easily be masked in development/local copies.\r\n\r\nAddition features\r\n\r\n- [ ] Allow logged in user to see all raw data stored about himself/herself (user entity).\r\n- [ ] Allow user to initiate “forget me” action from site admins.\r\n- [ ] More items and recommendations to checklist.\r\n- [ ] Make sure user can rectify all data about himself/herself.\r\n- [ ] Allow user to remove the account (content is not removed+but notified to admin).\r\n- [ ] Make API for other contrib modules to announce user data store.\r\n\r\n**Make no mistake**\r\n\r\nDon't assume that if you've enabled the GDPR , you're done ...\r\nGDPR will apply to any ERPNext site that deals with users, site visitors, etc, who are from the EU   (which public site does not do so?) ...\r\n\r\nPlease refer to this discussion:\r\n\r\nhttps://discuss.erpnext.com/t/is-erpnext-gdpr-ready/23103"},"comment":{"url":"https://api.github.com/repos/frappe/erpnext/issues/comments/391586780","html_url":"https://github.com/frappe/erpnext/issues/13936#issuecomment-391586780","issue_url":"https://api.github.com/repos/frappe/erpnext/issues/13936","id":391586780,"user":{"login":"actXc","id":1053278,"avatar_url":"https://avatars3.githubusercontent.com/u/1053278?v=4","gravatar_id":"","url":"https://api.github.com/users/actXc","html_url":"https://github.com/actXc","followers_url":"https://api.github.com/users/actXc/followers","following_url":"https://api.github.com/users/actXc/following{/other_user}","gists_url":"https://api.github.com/users/actXc/gists{/gist_id}","starred_url":"https://api.github.com/users/actXc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/actXc/subscriptions","organizations_url":"https://api.github.com/users/actXc/orgs","repos_url":"https://api.github.com/users/actXc/repos","events_url":"https://api.github.com/users/actXc/events{/privacy}","received_events_url":"https://api.github.com/users/actXc/received_events","type":"User","site_admin":false},"created_at":"2018-05-24T04:47:07Z","updated_at":"2018-05-24T04:47:07Z","author_association":"NONE","body":"look at matomo, they understood GDPR\r\nhttps://matomo.org/docs/gdpr/\r\nsame at moodle\r\nhttps://docs.moodle.org/34/en/GDPR\r\nor even at odoo.com:\r\nhttps://docs.moodle.org/34/en/GDPR\r\n\r\nGDPR will not go away\r\n"}}
{"actor":{"display_login":"actXc"}}