71
edits
Difference between revisions of "GDPR"
Jump to navigation
Jump to search
no edit summary
(→Q1.1a Check if the GDPR is applicable (jurisdiction): Adding roles and responsibilities) |
|||
| Line 165: | Line 165: | ||
=== Q1.2: What consequences does the GDPR has for the XMPP server operators === | === Q1.2: What consequences does the GDPR has for the XMPP server operators === | ||
=== Q1.3: What can/should the XSF do with it? === | === Q1.3: What can/should the XSF do with it? === | ||
Should changes required for GDPR compliance be mentioned directly into the | |||
XEPs we want to modify, or should they be mentioned in another XEP proper to | |||
GDPR, as discussed in standards@ thread[0]. Do we want local law requirements | |||
to appear in protocol specifications. | |||
Is the question of deletion | |||
[0]: https://mail.jabber.org/pipermail/standards/2018-April/034827.html | |||
== Q2: What consequences does the GDPR has for the XSF run XMPP server? == | == Q2: What consequences does the GDPR has for the XSF run XMPP server? == | ||
| Line 197: | Line 205: | ||
## should inform users about publishing MUC logs | ## should inform users about publishing MUC logs | ||
## should include information about S2S and possible jurisdiction changes | ## should include information about S2S and possible jurisdiction changes | ||
## quote to use: "by using this server to communicate with third parties you agree that data | |||
will be passed to third parties" | |||
== Technical ToDo == | == Technical ToDo == | ||
| Line 204: | Line 215: | ||
## versioning | ## versioning | ||
## to be determined: informing about EULA details | ## to be determined: informing about EULA details | ||
## create a workflow that allows both 6.1a (explicit permission) and 6.1b (execution of contract) | |||
# MUC status code: 170 when MAM enabled. Also something to say if the logs are public or private. | # MUC status code: 170 when MAM enabled. Also something to say if the logs are public or private. | ||
# Write about default visibility in data policy | # Write about default visibility in data policy | ||
| Line 227: | Line 239: | ||
## '''Note:''' Jingle-FT, server-side[0], doesn't support deletion. goffi mentioned he would submit a protoXEP for this. | ## '''Note:''' Jingle-FT, server-side[0], doesn't support deletion. goffi mentioned he would submit a protoXEP for this. | ||
# create a data-download tool | # create a data-download tool | ||
# resurrect the idea of automatic transfer of an account | ## List data types and their means of export, in ways that allow reuploading to other servers. | ||
## Provide an xmpp "client" as an export tool? | |||
# resurrect the idea of automatic transfer of an account to an other server, see XEP-0227 & XEP-0283. | |||
== Lawyer Questions == | == Lawyer Questions == | ||