evolution-events / Artaxerxes

Evolution Events information system
http://www.evolution-events.nl
4 stars 0 forks source link

Ask for explicit consent to process medical data #99

Closed matthijskooijman closed 4 years ago

matthijskooijman commented 4 years ago

We collect medical data on basis of explicit consent, so this consent must be explicitly given using a checkbox or similar. Filling in data in an optional field is consent, which is sufficient for normal data, but probably not explicit consent needed for medical data.

So adding a checkbox to the medical data step would be needed. We can probably pre-tick that checkbox when editing medical data, but it must not be preticked the first time.

This should also add an entry to the consent log, but probably only when the data is actually changed.