Policies

The Policies plugin provides a new user sign-on process, with ability to define multiple policies (site, privacy, third party), track user consents, and manage updates and versioning of the policies.

The Policies plugin forms part of Moodle’s privacy feature set and will assist sites to become GDPR compliant. It requires Moodle 3.4.2, which also includes the ability to check whether a new user is a minor. The plugin will be integrated in the Moodle 3.5 release in May 2018.

Enabling the policies plugin

After installing the policies plugin, it may be enabled as follows:

1. Go to 'Policy settings' in the Site administration.
2. Set the Site policy handler to 'Policies (tool_policy)'.
3. Save changes.

Two new pages will then appear in the Site administration - 'Manage policies' and 'User agreements'.

Manage policies

Policies and agreements

On the Manage policies page you can:

• Add a new site / privacy / third parties / other policy for all users, authenticated users or guests
• Change the active / inactive status of each policy
• View the number and percentage of users who have agreed to each policy
• Edit a policy and specify whether it is a minor change (not requiring users to reconfirm their consent) or not
• Change the order in which policies are shown to users

User consents

• The Consent page lists a summary of each policy
• The user is asked to specifically agree to each policy
• When the user agrees to the policies they will be taken to the standard user registration form
• The site admin or privacy officer has an overview of user consents, and can filter by policy to determine who consented at what time
• The site admin or privacy officer can manually consent on behalf of users

Capabilities

• Agree to policies - allowed for authenticated user role
• Manage policies - allowed for default role of manager only
• Manage privacy settings - allowed for default role of manager only
• View user agreements reports - allowed for default role of manager only
• Agree to policies on someone else's behalf - allowed for default role of manager only

See also

• GDPR for administrators (Moodle 3.4.2+)