General Data Protection Regulation (GDPR), is a regulation that applies to companies who are based in the EU and global companies that collect and process personal data about individuals from the EU. These companies will need to comply with the strict new rules that protects customer's data.
So, what is personal data under GDPR? It's any information relating to an identified or identifiable person. While process gives meaning of any operation performed on personal data; either storing, updating, deleting or structuring it.
Consent requirements for processing and storing personal data are considerably strengthened under GDPR. Consent notice must be presented before requesting personal data. Under GDPR, people who have consented to their personal data being processed most have associated:-
- the right to access data held about them.
- the right to request rectification of inaccurate or incomplete personal data.
- the right to have their data deleted.
- the right to restrict processing.
- the right to data portability (ability to download).
- the right to withdraw consent at any time.
What Do Admins Need To Do?
If you want to implement GDPR on Komento, you'll need to configure the following and consider adjusting a few settings.
Important
Please consult with your hosting provider on increasing your site's max_execution_time and memory_limit. It is advisable to increase max_execution_time = 60* and memory_limit = 512M*.
* Please take note, given that when a user posted tons of comments and has uploaded abundance of medias (photos, videos, audios) to the site, the higher the max_execution_time and memory_limit should be set.
Enabling GDPR
Enabling GDPR on Komento requires you to update a few settings. Navigate to Komento > Settings > General. You'll need to allow users to download their information and delete their account as illustrated below.
Please consider updating the following ACLs.
Cronjobs
You'll need to setup Cronjobs to automate the archiving process. The process of archiving users data are quite heavy to be processed on page load. Therefore, cronjob is very suitable for this process by spliting them into sections.
You can refer to Cronjobs for additional information on how to add cronjob commands on your server.
You'll need to use the following command for the GDPR archiving process.
http://yoursite.com/index.php?option=com_komento&crondata=1
If you're using Use Secure Cronjob URL please append &phrase=your_secure_cronjob_URL on your URL command.
http://yoursite.com/index.php?option=com_komento&crondata=1&phrase=your_secure_cronjob_URL
CPanel
The following is the CPanel command example.
/bin/wget -O /dev/null "http://yoursite.com/index.php?option=com_komento&crondata=1"
How Can Users Download Their Information?
Users will need to make a request for their information to be archived. This request can be done at Komento Dashboard. Click on Download My Data link as shown in the screenshot below.
Click on the Request Data button to complete the process. A confirmation dialog popup will be displayed as shown in the screenshot below. Click on the Request Data button to submit your request.
The archiving process will take a while, depending on how large the gathered data is.
Once the archive is ready for download, an email will be sent along with the download link. You can also download your archive by clicking the Download My Data button as displayed below.
Download Data Separately?
Why download your data for different extensions separately when you can combine them together. For futher understanding, please proceed to EasySocial joint download.