somedude00 Posted November 15, 2021 Share Posted November 15, 2021 Hi, according to GDPR law a user can request all their data, including content posted, in an format that can easily be transferred to another host. In other words, we need to be able to provide any user with their content, e.g. an export in PDF format or anything like this. As of today - how can we achieve that? The Button "Download personal information" in AdminCP only exports IP addresses, browser infos and other meta data, but not the posts of the user. Thanks! Link to comment Share on other sites More sharing options...
opentype Posted November 15, 2021 Share Posted November 15, 2021 54 minutes ago, somedude00 said: including content posted … Where does it say that? Link to comment Share on other sites More sharing options...
somedude00 Posted November 15, 2021 Author Share Posted November 15, 2021 https://gdpr-info.eu/art-20-gdpr/ https://dsgvo-gesetz.de/art-20-dsgvo/ Link to comment Share on other sites More sharing options...
Adriano Faria Posted November 15, 2021 Share Posted November 15, 2021 16 minutes ago, somedude00 said: https://gdpr-info.eu/art-20-gdpr/ https://dsgvo-gesetz.de/art-20-dsgvo/ Content posted isn’t personal data. https://invisioncommunity.com/forums/topic/461363-person-that-was-banned-now-requesting-all-data-help/?do=findComment&comment=2851934 Link to comment Share on other sites More sharing options...
opentype Posted November 15, 2021 Share Posted November 15, 2021 28 minutes ago, somedude00 said: https://gdpr-info.eu/art-20-gdpr/ https://dsgvo-gesetz.de/art-20-dsgvo/ Yeah, that clearly says nothing whatsoever about content. Link to comment Share on other sites More sharing options...
somedude00 Posted November 15, 2021 Author Share Posted November 15, 2021 (edited) Got this from my CEO: [...] that you can look at the stored content in a forum yourself doesn't count - that was the so-called "Irish solution". The Irish data protection authority got a kicking for that. Legal says we have to provide the content, too. Edited November 15, 2021 by somedude00 Link to comment Share on other sites More sharing options...
opentype Posted November 15, 2021 Share Posted November 15, 2021 Well, since it’s not really required, it also wasn’t built. Someone would need to code that for all the IPS app you run. Link to comment Share on other sites More sharing options...
somedude00 Posted November 15, 2021 Author Share Posted November 15, 2021 We only run the forum app and are currently crawling the user page where the users content is displayed. Automatically paging through hundrets of pages and exporting each page as PDF... But thanks for your input. Link to comment Share on other sites More sharing options...
Solution Marc Stridgen Posted November 16, 2021 Solution Share Posted November 16, 2021 15 hours ago, somedude00 said: Got this from my CEO: [...] that you can look at the stored content in a forum yourself doesn't count - that was the so-called "Irish solution". The Irish data protection authority got a kicking for that. Legal says we have to provide the content, too. As mentioned above, there is no way in which to export all posts a user has created at the present time. You can export only personal data. It would be interesting to have a read on the case you mention above though, if you could provide links to that. Link to comment Share on other sites More sharing options...
somedude00 Posted November 16, 2021 Author Share Posted November 16, 2021 I'm currently in the process of collecting information from our data protection people officer on that matter and might be able to share info. Will report back here if I get data that suggests exporting content might be necessary. From what I heard as of yet it might be a grey area and not 100% clear as to whether one has to provide the content or not. Link to comment Share on other sites More sharing options...
Marc Stridgen Posted November 16, 2021 Share Posted November 16, 2021 1 hour ago, somedude00 said: I'm currently in the process of collecting information from our data protection people officer on that matter and might be able to share info. Will report back here if I get data that suggests exporting content might be necessary. From what I heard as of yet it might be a grey area and not 100% clear as to whether one has to provide the content or not. In our experience, this hasnt been the case. Of course you should always consult in your own area with your own legal team if needed. All I can say at present however is that this isnt a feature of the platform at present. Link to comment Share on other sites More sharing options...
Recommended Posts