search

SORMAS-Foundation / SORMAS-Project

SORMAS (Surveillance, Outbreak Response Management and Analysis System) is an early warning and management system to fight the spread of infectious diseases.
https://sormas.org
GNU General Public License v3.0
291 stars 135 forks source link

Update Data Protection for certain Data Fields #13093

Open Candice-Louw opened 2 months ago

Candice-Louw commented 2 months ago

Problem Description

In order to be inline with data protection regulations in Luxembourg, certain data fields have to be updated. Some are applicable to SORMAS overall, while others are applicable only to Luxembourg (see details below).

Proposed Change

Tabs from the data dictionary:

Person

Current: Field ID Field Type Data protection
Person.birthdateMM birthdateMM Number -
Proposed (for all servers and instances): Field ID Field Type Data protection
Person.birthdateMM birthdateMM Number Personal

(Apply to all servers).

Location

Current: Field ID Field Type Data protection
Location.city city Text personal
Proposed (only for Luxembourg instances): Field ID Field Type Data protection
Location.city city Text -

(Apply removal of data protection restrictions for this field, but only if the server locale is set to Luxembourg)

Case

Current: Field ID Field Type Data protection
CaseData.healthConditions healthConditions HealthConditions -
CaseData.postpartum postpartum YesNoUnknown -
CaseData.trimester trimester Trimester -
Proposed (for all servers and instances): Field ID Field Type Data protection
CaseData.healthConditions healthConditions HealthConditions sensitive
CaseData.postpartum postpartum YesNoUnknown sensitive
CaseData.trimester trimester Trimester sensitive

(Apply to all servers).

Task

Current: Field ID Field Type Data protection
Task.creatorComment creatorComment Text -
Task.assigneeReply assigneeReply Text -
Proposed (for all servers and instances): Field ID Field Type Data protection
Task.creatorComment creatorComment Text - : Add GDPR notice (pop-up)
Task.assigneeReply assigneeReply Text - : Add GDPR notice (pop-up)

(Apply to all servers).

Event

Current: Field ID Field Type Data protection
Event.srcFirstName scrFirstName Text -
Event.srcLastName scrLastName Text -
Event.srcTelNo scrTelNo Text -
Event.srcEmail scrEmail Text -
Proposed (for all servers and instances): Field ID Field Type Data protection
Event.srcFirstName scrFirstName Text sensitive
Event.srcLastName scrLastName Text sensitive
Event.srcTelNo scrTelNo Text sensitive
Event.srcEmail scrEmail Text sensitive

(Apply to all servers).

Action

Current: Field ID Field Type Data protection
Action.description description Text -
Proposed (for all servers and instances): Field ID Field Type Data protection
Action.description description Text - : Add GDPR notice (pop-up)

(Apply to all servers).

Added Value/Benefit

Enhanced data protection and compliance.

Acceptance Criteria

Implementation Details

No response

Mockups

No response

Additional Information

No response