Welcome to Centmin Mod Community
Register Now

Discussing General Data Protection Regulation (GDPR)

Discussion in 'Web Development & Web Performance' started by eva2000, Apr 14, 2018.

Tags:
  1. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Folks my I noticed I added an extended privacy policy to the forums and part of the motivation is surrounding GDPR - General Data Protection Regulation which comes into effect on May 25, 2018. There's alot more to GDPR compliance, so thought it's about time I started a thread this forum for it and see what other web site owners are doing for GDPR.

    GDPR Info Links


    Examples of how this will effect us
     
  2. bassie

    bassie Active Member

    804
    190
    43
    Apr 29, 2016
    Ratings:
    +569
    Local Time:
    3:22 PM
    From your example:

    In short, if you want to comply with the GDPR, you must explicitly request permission to track users.
    Only a policy is not enough.

    GDPR example:

    [​IMG]

    It is a lot of work to fully comply with GDPR. Because you're from Australia. I wonder if you should want this.
     
  3. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah there's a lot more to do General Data Protection Regulation - Wikipedia

     
  4. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Nginx.com blog also covered some uses for Nginx nginScript for access logs utilising a 'Data Masking' approach nginScript Use Case: Data Masking for User Privacy. Centmin Mod Nginx server also optionally supports Nginx nginScript module too. Though probably not something a forum needs to do.
     
  5. Jon Snow

    Jon Snow Active Member

    328
    53
    28
    Jun 30, 2017
    Ratings:
    +76
    Local Time:
    10:22 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    What if the site is non-profit? What are they really going to do if you do not comply?
     
  6. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
     
  7. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    How GDPR Will Change The Way You Develop

     
  8. Revenge

    Revenge Active Member

    382
    80
    28
    Feb 21, 2016
    Portugal
    Ratings:
    +287
    Local Time:
    2:22 PM
    1.9.x
    10.1.x
    But im from Europe, so he needs to comply if he want to serve European users.

    Facebook is from United States, but if they don't comply, Europe can block Facebook access to European Countries. Simple as that.

    In a year or 2 at most, United States will also have something similar to this.
     
  9. bassie

    bassie Active Member

    804
    190
    43
    Apr 29, 2016
    Ratings:
    +569
    Local Time:
    3:22 PM
    @eva2000 does need nothing of course. :)
    Good luck Europe blocking a relatively small forum like this.

    Europe can force big company's who operate in Europe, with European offices on a legal basis.
    They can't force a private person from Australia. Both not legally and not technically.
    Viva la @eva2000 :)
     
  10. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah other countries are follow in GDPR's footsteps so really is matter of when not if we (as web site owners)/I need to comply.

    Was just thinking would be fairly easy for me to implement Nginx access log data masking nginScript Use Case: Data Masking for User Privacy out the box for Centmin Mod Nginx installs which Centmin Mod detects the server as having a geo location within Europe or use Nginx geoip location module to do stuff on a per continent basis i.e. EU continent :)
     
  11. Revenge

    Revenge Active Member

    382
    80
    28
    Feb 21, 2016
    Portugal
    Ratings:
    +287
    Local Time:
    2:22 PM
    1.9.x
    10.1.x
    Offcourse they won't do that, because this is a small forum. But if they really wanted, they could simple block centminmod forum in Europe. Like China blocks Google in their country. Its nothing that hard to do.

    But like i said, they won't care, especially if its a small site.
     
    • Agree Agree x 1
  12. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Yeah true, though no one starts a web site/forum with the intention of remaining 'small' forever :)

    hmm What is the GDPR and how will it affect your business - iubenda blog

     
  13. Matt

    Matt Moderator Staff Member

    752
    341
    63
    May 25, 2014
    Sheffield, UK
    Ratings:
    +507
    Local Time:
    2:22 PM
    1.7.1
    MariaDB 10
    It's a mine field! I'm paying someone to sort mine for me ;)
     
    • Informative Informative x 1
  14. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
  15. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Oooh GDPR Tool Kit | Shared Assessments

     
  16. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    self hosted cookie consent popup Cookie Consent by Insites - The most popular solution to the EU cookie law with opt-in demo Demos - Cookie Consent by Insites

    opt in demo requires additional call back hook at Disabling cookies - Cookie Consent by Insites not sure if I have my javascript setup correctly though. But looks like the actual logic for disabling and enabling cookies is left up to your to code as per your app ? i.e. Disabled cookies · Issue #205 · insites/cookieconsent

    HTML:
    <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.3/cookieconsent.min.css" />
    <script src="https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.3/cookieconsent.min.js"></script>
    <script>
    window.addEventListener("load", function(){
    window.cookieconsent.initialise({
      "palette": {
        "popup": {
          "background": "#e54b4d",
          "text": "#ffffff"
        },
        "button": {
          "background": "#43a6df",
          "text": "#ffffff"
        }
      },
      "theme": "edgeless",
      "type": "opt-in",
      "content": {
        "message": "By using this site you agree to our cookie usage policy",
        "dismiss": "Do Not Allow Cookies",
        "href": "https://community.centminmod.com/help/cookies"
      },
    onInitialise: function (status) {
      var type = this.options.type;
      var didConsent = this.hasConsented();
      if (type == 'opt-in' && didConsent) {
        // enable cookies
      }
      if (type == 'opt-out' && !didConsent) {
        // disable cookies
      }
    },
     
    onStatusChange: function(status, chosenBefore) {
      var type = this.options.type;
      var didConsent = this.hasConsented();
      if (type == 'opt-in' && didConsent) {
        // enable cookies
      }
      if (type == 'opt-out' && !didConsent) {
        // disable cookies
      }
    },
     
    onRevokeChoice: function() {
      var type = this.options.type;
      if (type == 'opt-in') {
        // disable cookies
      }
      if (type == 'opt-out') {
        // enable cookies
      }
    }
    })
    });
    </script>
     
  17. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
  18. Matt

    Matt Moderator Staff Member

    752
    341
    63
    May 25, 2014
    Sheffield, UK
    Ratings:
    +507
    Local Time:
    2:22 PM
    1.7.1
    MariaDB 10
    • Informative Informative x 1
  19. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
    Ah certainly makes things alot easier then :)
     
  20. eva2000

    eva2000 Administrator Staff Member

    33,668
    7,456
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +11,461
    Local Time:
    11:22 PM
    Nginx 1.13.x
    MariaDB 5.5
..