Make plugin compliant with GDPR

[ilyatregubov]

Since Moodle 3.4 all plugin should comply with GDPR https://docs.moodle.org/dev/Privacy_API

[bmbrands]

Hi Ilya, I have not had time to add this. If you're able to contribute this feature I would be happy to add it to this project.

[Kemmotar83]

What kind of implementation needs to be done? Maybe I could work on it because we also need this kind of update.

New features list:

• JavaScript tracking snippet
  • IP anonymization
    https://developers.google.com/analytics/devguides/collection/analyticsjs/ip-anonymization
  • Passing UserID: for data deletion and export
• Privacy API
  • Provider (description and metadata)
    https://docs.moodle.org/dev/Privacy_API#Indicating_that_you_export_data_to_an_external_location
  • Opt-out
    https://developers.google.com/analytics/devguides/collection/analyticsjs/user-opt-out
  • User ID/Client ID data deletion
    https://developers.google.com/analytics/devguides/config/userdeletion/v3/
  • User ID/Client ID data export (I cannot find any documentation)

Is this all it's need to implemented?

Thanks,
Giorgio

[bmbrands]

Hi Giorgio,

You are very welcome to work on this! And it looks like you are on the right track for the new feature list. I wonder if you can request data deletion for an external tracking system.. If so it should work for both Piwik (now Matomo) and Google Analytics.

Thanks!
Bas

[Kemmotar83]

Hi Bas,

I don't know Matomo/Piwik but Google Analytics has this API. I've never used it but it seems the right API for our goal. In order to delete user data, you need to provide the UserId to any tracked data.

I discussed with my boss, so in the next period we'll help you add these features (at least we'll try).

I'll let you know when we'll start to work on it.

Giorgio

[Findus23]

Hi @bmbrands ,

The latest Matomo release is fully GDPR compliant and therefore also supports data deletion. You can either use the GDPR tools inside of Matomo or the API

You can find more information about GDPR compliance in Matomo here: https://matomo.org/docs/gdpr/
Everything needed should be possible, if you have questions just ask.