General Data Protection Regulation

General Data Protection Regulation (GDPR), is a regulation that applies to companies who are based in the EU and global companies that collect and process personal data about individuals from the EU. These companies will need to comply with the strict new rules that protects customer's data.

So, what is personal data under GDPR? It's any information relating to an identified or identifiable person. While process gives meaning of any operation performed on personal data; either storing, updating, deleting, or structuring it.

Consent requirements for processing and storing personal data are considerably strenghtened under GDPR. Consent notice must be presented before requesting personal data. Under GDPR, people who have consented to their personal data being processed must have associated:-

• the right to access data held about them.
• the right to request rectification of inaccurate or incomplete personal data.
• the right to have their data deleted.
• the right to restrict processing.
• the right to data portability (ability to download).
• the right to withdraw consent at any time.

Implementation

To conform to the standards of GDPR, you would need to make several ammendments to the settings in EasyBlog as described below.

Enabling GDPR

The settings are located at EasyBlog > Settings > General > General Data Protection Regulation (GDPR). Turn on GDPR and set the archive expiration date. By default it is set to 14 days to increase efficiency.

Cronjobs

Since user data is often large and huge, it needs to be offloaded to the cronjob. The cronjob URL to process user's GDPR data would be as the following:

http://yoursite.com/index.php?option=com_easyblog&task=crondata

User's ACL

You also need to consider updating the ACL to conform to the requirements of GDPR. You may read more on our GDPR Configuration

Downloading User Data

Users will need to make a request for their information to be archived. This request can be done at Account section in EasyBlog. Click on the Download My Information button as shown in the screenshot below.

If your EasyBlog is integrated with EasySocial profile, the download link will also appear under EasyBlog's toolbar.

A confirmation dialog popup will be displayed as shown in the screenshot below. Click on the Start Archiving button to submit your request. The archiving process will take a while, depending on how large the gathered data is.

Once the archive is ready for download, an email will be sent along with the download link. You can also download your archive by clicking the Download My Information button.

After you have clicked the link, you'll be redirected to the download section. The system will verify your identity after you re-enter your password.

Once your identity is verified, a download popup will appear.

Guest Users

Only subscription information are stored for guests on site. If guest users wish to remove their information, they may do so by clicking on the unsubscribe link from within their email notifications. Example below.