Privacy by Design about excel-export HOT 5 CLOSED

This plugin itself does not collect or store data, but allows the export of the data that has already been collected via wordpress and any other plugins that may be enabled on the site. Every website will have different data collected and Privacy Policies. Some websites may have users opt-in elsewhere, or not allow any EU user accounts etc. Best solution I can think of, is to remind and encourage the website admin to follow GDPR best practices, and their own GDPR/Privacy policy when using this plugin.

GDPR compliance suggestions for this plugin we can include:

• Positive opt-in: Encourage admin to get Positive opt-in (no pre-checked box) from their users if they wish to use their data for export.
• Data retention: Remind the admin they should not keep the data longer than necessary to be compliant, and if a significant amount of data is processed to keep a record of all types of processing activities carried out (including transfers to 3rd parties).

from excel-export.

Also, not processing personal data (like IP/username/email) is a strategy. In cases where it's difficult to not process it, then hash/obfuscate it.

Though we're not dealing with Matomo here, it will be relevant: https://matomo.org/blog/2018/04/how-to-not-process-any-personal-data-with-matomo-and-what-it-means-for-you/

from excel-export.

Nice, so matomo allows you to toggle those settings. We could add a checkbox to enable/disable the obfuscation on those fields.

from excel-export.

sure, preference for a default would be obfuscation 'on', then

remind and encourage the website admin to follow GDPR best practices, and their own GDPR/Privacy policy when using this plugin

from excel-export.

Resolved via 00d68b6

from excel-export.