Investigate provider setup requirements with DP/FOI Office

gielinkg commented 2 months ago

We need to speak to the data protection and freedom of information office at UofG about the requirements for switching to Vercel/Nhost
We may need further liaising with the Procurement Office.
For now, we are planning to pay for Vercel/Nhost via credit card and we will NOT store any data there until we have approvals in place from the university.

gielinkg commented 2 months ago

✅ Definition of Done

[x] 1. Define acceptance criteria.
[x] 2. Assess the need for a review process. If a review process is required, the issue states: i. Who is involved in the review? ii. When will the review take place? iii. Who is responsible for taking on the feedback? iv. What additional tasks are involved and are they visible on the backlog?
[x] 3. Make progress and post updates.
[x] 4. Check off completed acceptance criteria.
[x] 5. Post links to digital outputs.
[x] 6. Note the value added to the product.

gielinkg commented 1 month ago

GG emailed Data Protection on 21st May. Will require monitoring and follow-up; auto-reply indicated they are very busy and short-staffed. Query attached:

Query Regarding External Cloud Provider.pdf

gielinkg commented 1 month ago

We got a response from the DP Office, which @diegopajarito has reviewed. We believe the first step is to draft an amendment to the Ethics App which includes the DPIA. @diegopajarito is going to prioritise this step now.

gielinkg commented 1 month ago

Updated email thread:

Re: Query Regarding External Cloud Provider.pdf

andymithamclarke commented 1 month ago

🚀

gielinkg commented 1 month ago

We are closing this issue and creating a new one for the update of the ethics application, which satisfies the criteria in this issue regarding compliance with uni policies. I am now liaising with Procurement and Yevdokia about how to setup these services properly. I will update on this in the payment issue #39

andymithamclarke commented 1 month ago

[like] Andrew Clarke reacted to your message:

From: gielinkg @.> Sent: Tuesday, May 28, 2024 10:09:05 AM To: urbanbigdatacentre/ideamaps-models @.> Cc: Andrew Clarke @.>; Comment @.> Subject: Re: [urbanbigdatacentre/ideamaps-models] Investigate provider setup requirements with DP/FOI Office (Issue #40)

We are closing this issue and creating a new one for the update of the ethics application, which satisfies the criteria in this issue regarding compliance with uni policies. I am now liaising with Procurement and Yevdokia about how to setup these services properly. I will update on this in the payment issue #39https://github.com/urbanbigdatacentre/ideamaps-models/issues/39

— Reply to this email directly, view it on GitHubhttps://github.com/urbanbigdatacentre/ideamaps-models/issues/40#issuecomment-2134839214, or unsubscribehttps://github.com/notifications/unsubscribe-auth/ANRVE6GYSW4ZFRHFC4R5CDTZERJUDAVCNFSM6AAAAABH3553FSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDCMZUHAZTSMRRGQ. You are receiving this because you commented.Message ID: @.***>

urbanbigdatacentre / ideamaps-models

Investigate provider setup requirements with DP/FOI Office #40