Make plugin compliant with GDPR

bmbrands / moodle-local_analytics

A Local Moodle Plugin adding Site Analytics

10 stars 23 forks source link

Make plugin compliant with GDPR #16

Open ilyatregubov opened 6 years ago

ilyatregubov commented 6 years ago

Since Moodle 3.4 all plugin should comply with GDPR https://docs.moodle.org/dev/Privacy_API

bmbrands commented 6 years ago

Hi Ilya, I have not had time to add this. If you're able to contribute this feature I would be happy to add it to this project.

Kemmotar83 commented 6 years ago

What kind of implementation needs to be done? Maybe I could work on it because we also need this kind of update.

New features list:

JavaScript tracking snippet
- IP anonymization https://developers.google.com/analytics/devguides/collection/analyticsjs/ip-anonymization
- Passing UserID: for data deletion and export
Privacy API
- Provider (description and metadata) https://docs.moodle.org/dev/Privacy_API#Indicating_that_you_export_data_to_an_external_location
- Opt-out https://developers.google.com/analytics/devguides/collection/analyticsjs/user-opt-out
- User ID/Client ID data deletion https://developers.google.com/analytics/devguides/config/userdeletion/v3/
- User ID/Client ID data export (I cannot find any documentation)

Is this all it's need to implemented?

Thanks, Giorgio

bmbrands commented 6 years ago

Hi Giorgio,

You are very welcome to work on this! And it looks like you are on the right track for the new feature list. I wonder if you can request data deletion for an external tracking system.. If so it should work for both Piwik (now Matomo) and Google Analytics.

Thanks! Bas

Kemmotar83 commented 6 years ago

Hi Bas,

I don't know Matomo/Piwik but Google Analytics has this API. I've never used it but it seems the right API for our goal. In order to delete user data, you need to provide the UserId to any tracked data.

I discussed with my boss, so in the next period we'll help you add these features (at least we'll try).

I'll let you know when we'll start to work on it.

Giorgio

Findus23 commented 5 years ago

Hi @bmbrands ,

The latest Matomo release is fully GDPR compliant and therefore also supports data deletion. You can either use the GDPR tools inside of Matomo or the API

You can find more information about GDPR compliance in Matomo here: https://matomo.org/docs/gdpr/ Everything needed should be possible, if you have questions just ask.