Shares personal data with an external system without privacy API implemented

bdecentgmbh / moodle-mod_typorepo

GNU General Public License v3.0

0 stars 2 forks source link

Shares personal data with an external system without privacy API implemented #12

Open mudrd8mz opened 4 years ago

mudrd8mz commented 4 years ago

The plugin shares sensitive personal data with an external system - username, firstname, lastname, email and maybe others.

Is sharing all these details really needed?
Of so, then this should be clearly highlighted in the plugin description and declared via the privacy API implementation, so that admins can incorporate it into their privacy policies.

https://docs.moodle.org/dev/Plugin_contribution_checklist#Privacy

stefanscholz commented 2 years ago

1) I've explained what the data is used for in #14 2) We've replaced username, firstname, lastname and email with only the id (we need a unique identifier in TYPO3) 3) We've implemented the privacy provider 4) We've added the information about what data is shared in the appropriate section of the plugin page.