General Data Protection Regulation (GDPR) is a regulation that applies to companies that are based in the EU and global companies that collect and process personal data about an individual from the EU. These companies will need to comply with the strict new rules that protect customers' data.
So, what is personal data under GDPR? It is any information relating to an identified or identifiable person. While process gives the meaning of any operation performed on the personal data; either storing, updating, deleting or structuring it.
The consent requirements for processing and storing personal data are considerably strengthened under GDPR. The consent notice must be presented before requesting personal data. Under GDPR, people who have consented to their data being processed must be associated to:
- the right to access data held about them
- the right to request rectification of inaccurate or incomplete personal data
- the right to have their data deleted
- the right to restrict processing
- the right to data portability (ability to download)
- the right to withdraw consent at any time.
What Do Admins Need To Do?
If you want to implement GDPR on EasySocial, you'll need to configure the following and consider adjusting a few settings.
Please consult your hosting provider to increase the site's
max_execution_time and memory_limit. It is advisable to increase the max_execution_time = 60 and memory_limit = 512M. Please take note, given that the users share tons of data such as stream items and have uploaded an abundance of media (photos, videos & audio) to the site, the higher the max_executaion_time and the memory_limit should be set.Enabling GDPR
To enable GDPR on EasySocial, you'll need to update a few settings. Navigate to EasySocial > Settings > Users > General and update the user's account deletion behavour. Following screenshot illustrate the settings.
Please consider updating the following ACLs.
Cronjobs
You'll need to setup cronjobs to automate the archiving process. The process of archiving the user's data are quite heavy to be processed on the page load. Therefore, cronjobs is the most suitable for this process by splitting them into sections.
You can refer to the cronjobs documentation for additional information on how to add cronjobs commands on your server.
You'll need to use the following command for the GDPR archiving process.
http://yoursite.com/index.php?option=com_easysocial&crondata=1
If you're using Use Secure Cronjobs URL please append &phrase=your_secure_cronjob_URL on your URL command.
http://yoursite.com/index.php?option=com_easysocial&crondata=1&phrase=your_secure_cronjob_URL
If you're using cronjobs file path, you can use the following command.
JoomlaFolder/components/com_easysocial/crondata.php
If you plan to use the cronjobs files, remember to change the
$host value to your domain and add the secure cronjobs key to the cronjobs url if applicable.CPanel GDPR Command
Please use the following command for cPanel.
/bin/wget -O /dev/null "http://yoursite.com/index.php?option=com_easysocial&crondata=1"
How Can Users Download Their Information?
Users will need to make a request for their information to be archived. This request can be done at the Edit Account section in EasySocial. Click on the Download Your Information link in the profile edit page as shown in the screenshot below.
Click on the Request Account Data button to complete the process.
A confirmation dialog popup will be displayed as shown in the screenshot below. Click on the Request Data button to submit your request. The archiving process will take a while, depending on how large the gathered data is.
Once the archive is ready for download, an email will be sent along with the download link. You can also download your archive by clicking the Download My Data button as displayed below.
Why should you download your account data separately? You can combine them together and download it in one place. Read more on this at EasySocial Joint Download.