Policies

The Policies plugin provides a new user sign-on process, with ability to define multiple policies (site, privacy, third party), track user consents, and manage updates and versioning of the policies.

The Policies plugin forms part of Moodle’s privacy feature set and will assist sites to become GDPR compliant. It requires Moodle 3.4.2, which also includes the ability to check whether a new user is a minor. The plugin will be integrated in the Moodle 3.5 release in May 2018.

Enabling the policies plugin

After installing the policies plugin, it may be enabled as follows:

1. Go to 'Policy settings' in the Site administration.
2. Set the Site policy handler to 'Policies (tool_policy)'.
3. Save changes.

Two new pages will then appear in the Site administration - 'Manage policies' and 'User agreements'.

Manage policies

Policies and agreements

On the Manage policies page you can:

• Add a new site / privacy / third parties / other policy for all users, authenticated users or guests
• Change the active / inactive status of each policy
• View the number and percentage of users who have agreed to each policy
• Edit a policy and specify whether it is a minor change (not requiring users to reconfirm their consent) or not
• View the current version of each policy and also previous versions
• Change the order in which policies are shown to users

User agreements

User agreements filtered to show minors

On the User agreements page you can:

• View user consents
• Filter by policy, permission, status or role
• Manually consent on behalf of minors
• Download table data

For example, you can obtain the list of minors by filtering by 'Permission: Can not agree', then manually consent to policies on their behalf.

Capabilities

• Agree to policies - allowed for authenticated user role
• Manage policies - allowed for default role of manager only
• Manage privacy settings - allowed for default role of manager only
• View user agreements reports - allowed for default role of manager only
• Agree to policies on someone else's behalf - allowed for default role of manager only

See also

• GDPR for administrators (Moodle 3.4.2+)