Data privacy

Maintained by Jun Pataleta, Moodle HQ
Provides the workflow for users to submit subject access requests and for site administrators and privacy officers to process these requests.
Price option: Free

Supports Moodle 3.3-3.4 See all versions
Latest release: 6 years ago
Installations: 8
Downloads (last 90 days): 373

Frankenstyle name: tool_dataprivacy
Administration tools
GDPR

Comments

Comments are no longer open for new posts. Existing comments remain available to read.

Thanks for the report Dinis. We are fixing this issue right now. We will release new versions of the tool in a few hours.
I'm using version 3.4.2 (20180319)
I uninstalled the block_filtered_course_list and i got this:
Exception - Call to undefined method core_component::get_component_list()
Debug info:
Error code: generalexceptionmessage
Stack trace:
line 125 of /admin/tool/dataprivacy/classes/metadata_registry.php: Error thrown
line 46 of /admin/tool/dataprivacy/classes/metadata_registry.php: call to tool_dataprivacy\metadata_registry->get_full_component_list()
line 41 of /admin/tool/dataprivacy/pluginregistry.php: call to tool_dataprivacy\metadata_registry->get_registry_metadata()
Another possible explanation is that https://moodle.org/plugins/block_filtered_course_list is not pointing to the correct null_provider class location.
Hi Dinis,
What moodle version are you using? Note that this plugin works with Moodle 3.4.2 and Moodle 3.3.5 (onwards).
When i try to access "Plugin privacy registry" i got this:
Fatal error: Interface 'core_privacy\metadata\null_provider' not found in /public_html/moodle/blocks/filtered_course_list/classes/privacy/provider.php on line 36
Any help? TIA
Hi Dinis,
Thanks for commenting, that language string does not exist any more so no need to translate it.
String {dataprivacysettings/tool_dataprivacy} can't be translated. It isn't in lang file.
Can you insert it? TIA
I'm a PT translator
Hi Wendy,
Users should be able to request data via a 'Data requests' link on their profile page. Please see the documentation https://docs.moodle.org/en/Data_privacy_plugin for more details.
You can also try things out on the Moodle GDPR sandbox demo site https://gdprdemo.moodle.net/.
Hi Nick,
Yes, when exporting user data the output data will be in JSON format and this is handled by the privacy\classes\local\request\moodle_content_writer.php class.
The name of the exported data JSON file depends on the particular plugin's logic implemented in the export_user_data() function, but by default most plugin's export data will have the name 'data.json'.
The data export of associated physical files is also supported in the same class.
For this upcoming release, the exported user data and physical files will be organized in a logical folder structure that reflects the Moodle context hierarchy so it is intuitive for users to navigate and access their data.
But we are also looking to add way to present the exported data with a easy-to-use user interface as well, for example, in a web browser.
Hi there, I have installed the plugin and followed the 13 steps above. Just I don't see any option to ask for a data request as a user. What am I doing wrong or missing?
Apologies in repeating my question but I need to know if I've configured the plugin correctly. Does this solely output .json files when exporting the data?
Ziyad I am also trying to assign a Data Protection officer with this plugin. By the looks of things, when a user requests to contact the Data Protection officer, the Site admin email account is put in by default.
Following Jun's instructions sets up the Data Protection officer to receive a message whenever a user clicks "Contact Data Protection officer" in their profile and replaces the admin.
However, this only works for the general enquiries at the moment. When a user submits a Delete or Export request, the Data Protection Officers don't receive any message. Hope this is added soon.
Hi Justin,
The requirements for the plugin are largely centred around the rights of users; their right of access to their personal data, and their right to be forgotten. Whilst there is a requirement that organisations operating under GDPR must be able to produce registers, describing all personal data they capture, we didn't identify any such requirement allowing Data Protection Officers or Privacy Officers to view the actual personal data for a given user. This would most probably be considered a nice to have, but unfortunately given time constraints, we haven't planned to include this yet.
I am testing my plugins against this nice tool, and it seems like some things are missing. Perhaps its just early days .. but in addition to /export/delete I would expect a 'view' option, to be able to see what the data we had on a user. Also in the list of submitted requests, shouldn't there be a "user name" column?
Hello David,
thanks for the response. My current version is Moodle 3.4.1+ . My fault...should read better smile
Best regards