OEP-30 introduced a way to document and audit PII so that we can make sure it is handled appropriately, and retired correctly. Implementation has gotten stale, and the enforcement check on edx-platform has been turned off for a long time. We should make a decision as to whether the OEP should be archived or if we want to carry this work forward.
OEP-30 introduced a way to document and audit PII so that we can make sure it is handled appropriately, and retired correctly. Implementation has gotten stale, and the enforcement check on edx-platform has been turned off for a long time. We should make a decision as to whether the OEP should be archived or if we want to carry this work forward.
https://github.com/openedx/edx-platform/pull/28446 did some work toward fixing things, but was abandoned when I left edX.