GEWIS / sudosos-backend

SudoSOS is a Node.js-based Bar and POS system made for study association GEWIS.
https://sudosos.gewis.nl
GNU Affero General Public License v3.0
6 stars 3 forks source link

Data Request Service #354

Open SvenMokveldje opened 1 month ago

SvenMokveldje commented 1 month ago

What would you like?

To be able to return all personal data from a user, preferable as PDF and filtered such that no other users data is present.

Why is this needed?

To make it easier for the GDPR officers if a GDPR request comes in.

How could it be implemented?

No response

Other information

No response

Yoronex commented 1 month ago

I already did some work for this in the feature/personal-data-extraction branch.

JustSamuel commented 1 month ago

all personal data in a pdf? thats quite a lot.

Also PDFs SUCK. how about a textfile?

Yoronex commented 1 month ago

Agree with Samuel: it would be better to return a huge JSON containing all data, as returning this data in human-readable format is in my opinion not SudoSOS's responsibility. Other GEWIS services have the same problem, so it is in my opinion better to create a single, centralized solution for this.

SvenMokveldje commented 1 month ago

Yes, but could you not make the JSON file immediately as a PDF file that way it's still ugly but the GDPR officers can immediately stripe out other sensitive info

JustSamuel commented 1 month ago

Yes, but could you not make the JSON file immediately as a PDF file that way it's still ugly but the GDPR officers can immediately stripe out other sensitive info

...like its a word document that you print to pdf?