This section is mainly about the users that have requested to download their informations as Payplans are GDPR compliance. You can monitor them accordingly as shown below for an example.
What is the General Data Protection Regulation (GDPR)
General Data Protection Regulation (GDPR), is a regulation that applies to companies who are based in the EU and global companies that collect and process personal data about individuals from the EU. These companies will need to comply with the strict new rules that protects customer's data.
So, what is personal data under GDPR? It's any information relating to an identified or identifiable person. While process gives meaning of any operation performed on personal data; either storing, updating, deleting, or structuring it.
Consent requirements for processing and storing personal data are considerably strenghtened under GDPR. Consent notice must be presented before requesting personal data. Under GDPR, people who have consented to their personal data being processed must have associated:-
- the right to access data held about them.
- the right to request rectification of inaccurate or incomplete personal data.
- the right to have their data deleted.
- the right to restrict processing.
- the right to data portability (ability to download).
- the right to withdraw consent at any time.
What Admin Needs To Do?
If you want to implement GDPR on Payplans, you'll need to configure the following and consider adjusting a few settings.
max_execution_time and memory_limit. It is advisable to increase max_execution_time = 60* and memory_limit = 512M*.
* Do take note, given that when a user has a lot of contributions on the site, the higher the max_execution_time and memory_limit are required
Enabling GDPR
Enable Allow Downloading User Data to enable this feature.
Also, you can set the archive expiration days at Download Files Expiration. By default, it is set to 14 days to increase efficiency.
Cronjobs
You'll need to setup a Cronjob to automate archiving process. The process of archiving the user's data are quite heavy to be processed on page load. Therefore, a cronjob is very suitable for this process by spliting them into sections. You'll need to use the following command for GDPR archiving process.
http://yoursite.com/index.php?option=com_payplans&view=cron&task=trigger
How Can The Users Download Their Information?
Users will need to request for their information to be archived. This request can be done at Download Data page in Payplans. Click on Request Account Data button as shown in the screenshot below.
Once those archive(download files) ready, an email will be sent with the download link to the respective users. Users also can download them on the dashboard.
