Get the most out of your Centmin Mod LEMP stack
Become a Member

Discussing General Data Protection Regulation (GDPR)

Discussion in 'Web Development & Web Performance' started by eva2000, Apr 14, 2018.

Tags:
  1. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Folks my I noticed I added an extended privacy policy to the forums and part of the motivation is surrounding GDPR - General Data Protection Regulation which comes into effect on May 25, 2018. There's alot more to GDPR compliance, so thought it's about time I started a thread this forum for it and see what other web site owners are doing for GDPR.

    GDPR Info Links


    Examples of how this will effect us


     
  2. buik

    buik “The best traveler is one without a camera.”

    2,037
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,684
    Local Time:
    7:27 AM
    From your example:

    In short, if you want to comply with the GDPR, you must explicitly request permission to track users.
    Only a policy is not enough.

    GDPR example:

    [​IMG]

    It is a lot of work to fully comply with GDPR. Because you're from Australia. I wonder if you should want this.
     
  3. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Yeah there's a lot more to do General Data Protection Regulation - Wikipedia

     
  4. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Nginx.com blog also covered some uses for Nginx nginScript for access logs utilising a 'Data Masking' approach nginScript Use Case: Data Masking for User Privacy. Centmin Mod Nginx server also optionally supports Nginx nginScript module too. Though probably not something a forum needs to do.
     
  5. Jon Snow

    Jon Snow Active Member

    858
    172
    43
    Jun 30, 2017
    Ratings:
    +264
    Local Time:
    2:27 AM
    Nginx 1.13.9
    MariaDB 10.1.31
    What if the site is non-profit? What are they really going to do if you do not comply?
     
  6. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
     
  7. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    How GDPR Will Change The Way You Develop

     
  8. Revenge

    Revenge Active Member

    469
    93
    28
    Feb 21, 2016
    Portugal
    Ratings:
    +354
    Local Time:
    6:27 AM
    1.9.x
    10.1.x
    But im from Europe, so he needs to comply if he want to serve European users.

    Facebook is from United States, but if they don't comply, Europe can block Facebook access to European Countries. Simple as that.

    In a year or 2 at most, United States will also have something similar to this.
     
  9. buik

    buik “The best traveler is one without a camera.”

    2,037
    527
    113
    Apr 29, 2016
    Flanders
    Ratings:
    +1,684
    Local Time:
    7:27 AM
    @eva2000 does need nothing of course. :)
    Good luck Europe blocking a relatively small forum like this.

    Europe can force big company's who operate in Europe, with European offices on a legal basis.
    They can't force a private person from Australia. Both not legally and not technically.
    Viva la @eva2000 :)
     
  10. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Yeah other countries are follow in GDPR's footsteps so really is matter of when not if we (as web site owners)/I need to comply.

    Was just thinking would be fairly easy for me to implement Nginx access log data masking nginScript Use Case: Data Masking for User Privacy out the box for Centmin Mod Nginx installs which Centmin Mod detects the server as having a geo location within Europe or use Nginx geoip location module to do stuff on a per continent basis i.e. EU continent :)
     
  11. Revenge

    Revenge Active Member

    469
    93
    28
    Feb 21, 2016
    Portugal
    Ratings:
    +354
    Local Time:
    6:27 AM
    1.9.x
    10.1.x
    Offcourse they won't do that, because this is a small forum. But if they really wanted, they could simple block centminmod forum in Europe. Like China blocks Google in their country. Its nothing that hard to do.

    But like i said, they won't care, especially if its a small site.
     
  12. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Yeah true, though no one starts a web site/forum with the intention of remaining 'small' forever :)

    hmm What is the GDPR and how will it affect your business - iubenda blog

     
  13. Matt

    Matt Well-Known Member

    932
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +671
    Local Time:
    6:27 AM
    1.5.15
    MariaDB 10.2
    It's a mine field! I'm paying someone to sort mine for me ;)
     
  14. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  15. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Oooh GDPR Tool Kit | Shared Assessments

     
  16. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    self hosted cookie consent popup Cookie Consent by Insites - The most popular solution to the EU cookie law with opt-in demo Demos - Cookie Consent by Insites

    opt in demo requires additional call back hook at Disabling cookies - Cookie Consent by Insites not sure if I have my javascript setup correctly though. But looks like the actual logic for disabling and enabling cookies is left up to your to code as per your app ? i.e. Disabled cookies · Issue #205 · insites/cookieconsent

    HTML:
    <link rel="stylesheet" type="text/css" href="https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.3/cookieconsent.min.css" />
    <script src="https://cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.0.3/cookieconsent.min.js"></script>
    <script>
    window.addEventListener("load", function(){
    window.cookieconsent.initialise({
      "palette": {
        "popup": {
          "background": "#e54b4d",
          "text": "#ffffff"
        },
        "button": {
          "background": "#43a6df",
          "text": "#ffffff"
        }
      },
      "theme": "edgeless",
      "type": "opt-in",
      "content": {
        "message": "By using this site you agree to our cookie usage policy",
        "dismiss": "Do Not Allow Cookies",
        "href": "https://community.centminmod.com/help/cookies"
      },
    onInitialise: function (status) {
      var type = this.options.type;
      var didConsent = this.hasConsented();
      if (type == 'opt-in' && didConsent) {
        // enable cookies
      }
      if (type == 'opt-out' && !didConsent) {
        // disable cookies
      }
    },
     
    onStatusChange: function(status, chosenBefore) {
      var type = this.options.type;
      var didConsent = this.hasConsented();
      if (type == 'opt-in' && didConsent) {
        // enable cookies
      }
      if (type == 'opt-out' && !didConsent) {
        // disable cookies
      }
    },
     
    onRevokeChoice: function() {
      var type = this.options.type;
      if (type == 'opt-in') {
        // disable cookies
      }
      if (type == 'opt-out') {
        // enable cookies
      }
    }
    })
    });
    </script>
     
  17. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  18. Matt

    Matt Well-Known Member

    932
    415
    63
    May 25, 2014
    Rotherham, UK
    Ratings:
    +671
    Local Time:
    6:27 AM
    1.5.15
    MariaDB 10.2
  19. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Ah certainly makes things alot easier then :)
     
  20. eva2000

    eva2000 Administrator Staff Member

    55,458
    12,257
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,841
    Local Time:
    3:27 PM
    Nginx 1.27.x
    MariaDB 10.x/11.4+