Re: [Arches] GDPR features on Arches

[Alexei Peters]

Hi Joel,
This is a really good question and one that I was wondering about myself,
because of the recent flurry of GDPR related emails I've been getting.

I don't know if I can definitively answer this question, but I can
speculate, so here goes!

The main thrust of the GDPR is around protecting users personal
information, especially as it pertains to analysis, processing and
dissemination.
Arches only collects enough personal information to support
authentication.  That information is only used for that purpose; it is
neither analyzed nor disseminated (strictly speaking it is processed, which
can mean simply storing it).
One of the things that did jump out at me was the "Right to erasure (‘right
to be forgotten’)" (https://gdpr-info.eu/art-17-gdpr/) .  Right now, there
is no way for an Arches end user to remove there identity from the system
and there probably should be.

Generally, it seems to me that the main burden is on the "Data Controller",
and that seems to fall squarely on the implementer of Arches and not on the
Arches software itself.
Arches COULD be used to collect sensitive user data, but again, I believe
at that point it would be up to the implementer to comply with the GDPR.

If you are aware of any specific features of the GDPR that could be
incorporated into Arches, I'd love to hear them,
Cheers,
Alexei


Director of Web Development - Farallon Geographics, Inc. - 971.227.3173

On Wed, May 2, 2018 at 11:02 PM, Joel Aldor  wrote:

> Hi Arches Team,
>
> I'd like to know if there are any plans to incorporate features for GDPR
> compliance for organizations that uses Arches. GDPR is about to take effect
> in a few weeks in the EU (in the Philippines, the Data Privacy Act, which
> is 99% copied from GDPR, has been in full implementation since September of
> last year), and we're concerned as to how personal data and sensitive
> personal information of built heritage stakeholders can be protected. This
> has now become a major concern for us regarding our future plans in
> collecting heritage data.
>
> Hope to hear some answers from the project team. Thank you.
>
> Joel
>
>
> --
> -- To post, send email to archesproject@googlegroups.com. To unsubscribe,
> send email to archesproject+unsubscr...@googlegroups.com. For more
> information, visit https://groups.google.com/d/forum/archesproject?hl=en
> ---
> You received this message because you are subscribed to the Google Groups
> "Arches Project" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to archesproject+unsubscr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.
>

-- 
-- To post, send email to archesproject@googlegroups.com. To unsubscribe, send 
email to archesproject+unsubscr...@googlegroups.com. For more information, 
visit https://groups.google.com/d/forum/archesproject?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesproject+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Arches] GDPR features on Arches

[Joel Aldor]

Hi Arches Team,

I'd like to know if there are any plans to incorporate features for GDPR 
compliance for organizations that uses Arches. GDPR is about to take effect 
in a few weeks in the EU (in the Philippines, the Data Privacy Act, which 
is 99% copied from GDPR, has been in full implementation since September of 
last year), and we're concerned as to how personal data and sensitive 
personal information of built heritage stakeholders can be protected. This 
has now become a major concern for us regarding our future plans in 
collecting heritage data.

Hope to hear some answers from the project team. Thank you.

Joel


-- 
-- To post, send email to archesproject@googlegroups.com. To unsubscribe, send 
email to archesproject+unsubscr...@googlegroups.com. For more information, 
visit https://groups.google.com/d/forum/archesproject?hl=en
--- 
You received this message because you are subscribed to the Google Groups 
"Arches Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to archesproject+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.