GDPR: Difference between revisions
No edit summary |
|||
| (15 intermediate revisions by 6 users not shown) | |||
| Line 5: | Line 5: | ||
</div> | </div> | ||
* [[GDPR for administrators|GDPR for admins]] | * [[GDPR for administrators|GDPR for admins]] | ||
* [[ | * [[Policies plugin]] | ||
* [[Data privacy plugin]] | |||
* [[GDPR FAQ]] | * [[GDPR FAQ]] | ||
</div> | </div> | ||
| Line 11: | Line 12: | ||
== Overview == | == Overview == | ||
GDPR stands for General Data Protection Regulation and refers to the European Union regulation for data protection for all individuals within the European Union. The regulation (Regulation (EU) 2016/679)[[#ref2|2]] becomes enforceable on 25 May 2018 and replaces the data protection directive (officially Directive 95/46/EC)[[#ref3|3]] from 1995. | GDPR stands for General Data Protection Regulation and refers to the European Union regulation for data protection for all individuals within the European Union. The regulation (Regulation (EU) 2016/679)[[#ref2|<sup>2</sup>]] becomes enforceable on 25 May 2018 and replaces the data protection directive (officially Directive 95/46/EC)[[#ref3|<sup>3</sup>]] from 1995. | ||
{{New features}} | |||
{{MediaPlayer | url = https://youtu.be/bl_h4FX2WDI | desc = Overview of GDPR features}} | |||
===Who does it affect?=== | ===Who does it affect?=== | ||
| Line 25: | Line 29: | ||
Earlier this year we reached out to the community through our forums and social media to gauge the needs of different organisations on how they would need to comply with GDPR. We received direct input from a number of Moodle institutions, our Moodle Partner network and developers. | Earlier this year we reached out to the community through our forums and social media to gauge the needs of different organisations on how they would need to comply with GDPR. We received direct input from a number of Moodle institutions, our Moodle Partner network and developers. | ||
We | We developed a set of features (made available in Moodle 3.5 and through plugins and some minimal changes to core, for Moodle 3.3 and 3.4) which will assist Moodle sites meeting GDPR compliance needs. The features cover the following areas: | ||
* Onboarding of new users, including; age and location check to identify minors, versioning of privacy policies and the tracking of user consents; | * Onboarding of new users, including; age and location check to identify minors, versioning of privacy policies and the tracking of user consents; | ||
* Handling of subject access requests and erasure requests, and maintaining a data registry. | * Handling of subject access requests and erasure requests, and maintaining a data registry. | ||
[https://moodle.com/news/moodle-gdpr-approach-plan/ Find out more about | [https://moodle.com/news/moodle-gdpr-approach-plan/ Find out more about the approach we took.] | ||
'''Important note:''' Installing the developed plugins alone will not be enough to meet the GDPR requirements. Correct configuration and implementation of the required processes and procedures is also required. | '''Important note:''' Installing the developed plugins alone will not be enough to meet the GDPR requirements. Correct configuration and implementation of the required processes and procedures is also required. | ||
| Line 37: | Line 40: | ||
We at Moodle HQ highly recommend that you also engage your IT and legal departments on what is required for GDPR compliance. | We at Moodle HQ highly recommend that you also engage your IT and legal departments on what is required for GDPR compliance. | ||
====GDPR plugins==== | |||
Plugins [[Policies plugin]] and [[Data privacy plugin]] are included in standard distribution of Moodle 3.5 . | |||
==Moodle & GDPR for plugin developers== | ==Moodle & GDPR for plugin developers== | ||
| Line 48: | Line 48: | ||
If you are a plugin developer, we recommend the following actions to assist you in preparing your Moodle plugin for GDPR: | If you are a plugin developer, we recommend the following actions to assist you in preparing your Moodle plugin for GDPR: | ||
* please read through our spec documentation [ | * please read through our spec documentation [[:dev:GDPR for plugin developers|GDPR for plugin developers]] in the dev docs and, | ||
* join the discussion [https://moodle.org/mod/forum/discuss.php?d=352538 EU General Data Protection Regulation (GDPR) compliance.] | * join the discussion [https://moodle.org/mod/forum/discuss.php?d=352538 EU General Data Protection Regulation (GDPR) compliance.] | ||
==Moodle & GDPR for Educators & Learners== | ==Moodle & GDPR for Educators & Learners== | ||
| Line 58: | Line 57: | ||
* Check in with your system administrators for information specific to your institution or organisation; | * Check in with your system administrators for information specific to your institution or organisation; | ||
* Read more information on GDPR in the “See also” section below. | * Read more information on GDPR in the “See also” section below. | ||
==Latest News & Updates== | ==Latest News & Updates== | ||
* [https://moodle.org/mod/forum/discuss.php?d=367522#p1482337 Data Privacy and Policy plugins to support GDPR compliance now available] | * [https://moodle.org/mod/forum/discuss.php?d=367522#p1482337 Data Privacy and Policy plugins to support GDPR compliance now available] | ||
==See also== | ==See also== | ||
* [[GDPR FAQ]] | * [[GDPR FAQ]] | ||
| Line 76: | Line 71: | ||
* [http://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf GDPR Regulation] | * [http://data.consilium.europa.eu/doc/document/ST-5419-2016-INIT/en/pdf GDPR Regulation] | ||
* [http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:31995L0046 Directive 95/46/EC] | * [http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:31995L0046 Directive 95/46/EC] | ||
* [https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/ Guide to the General Data Protection Regulation (GDPR)] from the UK's Information Commissioner's Office | |||
[[Category:GDPR]] | [[Category:GDPR]] | ||
| Line 81: | Line 77: | ||
[[es:GDPR]] | [[es:GDPR]] | ||
[[fr:RGPD]] | [[fr:RGPD]] | ||
[[de:DSGVO]] | |||
Revision as of 06:54, 20 September 2018
Overview
GDPR stands for General Data Protection Regulation and refers to the European Union regulation for data protection for all individuals within the European Union. The regulation (Regulation (EU) 2016/679)2 becomes enforceable on 25 May 2018 and replaces the data protection directive (officially Directive 95/46/EC)3 from 1995.
Who does it affect?
Any individual or organisation that stores or processes personal information on an identifiable person from an EU member state (regardless if the processing or storage of information occurs in the EU or not). It also applies if the individual or organisation themselves is located in an EU member state.
What kind of information comprises personal data in a Moodle site?
It is all information that can be associated with a natural person. Each user account and all the activity associated with that user account is classified as personal information. This also extends to associated information such as web server log files.
How is Moodle HQ assisting with GDPR compliance?
Earlier this year we reached out to the community through our forums and social media to gauge the needs of different organisations on how they would need to comply with GDPR. We received direct input from a number of Moodle institutions, our Moodle Partner network and developers.
We developed a set of features (made available in Moodle 3.5 and through plugins and some minimal changes to core, for Moodle 3.3 and 3.4) which will assist Moodle sites meeting GDPR compliance needs. The features cover the following areas:
- Onboarding of new users, including; age and location check to identify minors, versioning of privacy policies and the tracking of user consents;
- Handling of subject access requests and erasure requests, and maintaining a data registry.
Find out more about the approach we took.
Important note: Installing the developed plugins alone will not be enough to meet the GDPR requirements. Correct configuration and implementation of the required processes and procedures is also required.
We at Moodle HQ highly recommend that you also engage your IT and legal departments on what is required for GDPR compliance.
GDPR plugins
Plugins Policies plugin and Data privacy plugin are included in standard distribution of Moodle 3.5 .
Moodle & GDPR for plugin developers
If you are a plugin developer, we recommend the following actions to assist you in preparing your Moodle plugin for GDPR:
- please read through our spec documentation GDPR for plugin developers in the dev docs and,
- join the discussion EU General Data Protection Regulation (GDPR) compliance.
Moodle & GDPR for Educators & Learners
If you are an educator or a learner and would like to find out more about your rights under GDPR and how features in Moodle can assist with protecting your data privacy, we recommend you:
- Check in with your system administrators for information specific to your institution or organisation;
- Read more information on GDPR in the “See also” section below.
Latest News & Updates
See also
References:
- Home Page of EU GDPR
- GDPR Regulation
- Directive 95/46/EC
- Guide to the General Data Protection Regulation (GDPR) from the UK's Information Commissioner's Office
