Re: [pydotorg-www] GDPR policy for Python.org?

2020-07-08 Thread Mats Wichmann
On 7/8/20 2:29 PM, M.-A. Lemburg wrote:
> I'm not aware of any such work.
> 
> FYI: GDPR compliance is rather difficult to reach in an open
> volunteer based environment. You can only manage this if you pin
> down data access to a smaller limited number of people.
> 
> 
> On 08.07.2020 21:14, Terri Oda wrote:
>> Hey all,
>>
>> The Python Google Summer of Code team is trying to make sure we're
>> compliant with GDPR, particularly because we're updating the blogging
>> system that stores student weekly reports so now's a good time to review
>> any data storage policy.
>>
>> As far as we can tell, the PSF's policy hasn't been updated since 2015,
>> so it predates GDPR. Is anyone working on it and is there anything we
>> should know?
>>
>>  Terri

/waves to Terri from New Mexico. Miss us?  :)

I'd say another big challenge is that python.org is a lot of differently
managed pieces, not really unified except that they externally all
appear to be part of python.org ... there's a CMS-managed part, a wiki,
a jobs site, a blog site, the mailing lists (with, importantly,
archives), the legacy bugtracker (b.p.o).  further - and one of the
reasons it's so hard to do this for OSS projects - external sites may
present a copy of the mailing list archive which python.org has no
control over. It probably wouldn't hurt just to do an exercise to know
there's a policy that should - or should not - apply across all of
those, or what separate policies might be.  'We don't know" is kind of a
bad answer.

___
pydotorg-www mailing list
pydotorg-www@python.org
https://mail.python.org/mailman/listinfo/pydotorg-www


Re: [pydotorg-www] GDPR policy for Python.org?

2020-07-08 Thread M.-A. Lemburg
I'm not aware of any such work.

FYI: GDPR compliance is rather difficult to reach in an open
volunteer based environment. You can only manage this if you pin
down data access to a smaller limited number of people.


On 08.07.2020 21:14, Terri Oda wrote:
> Hey all,
> 
> The Python Google Summer of Code team is trying to make sure we're
> compliant with GDPR, particularly because we're updating the blogging
> system that stores student weekly reports so now's a good time to review
> any data storage policy.
> 
> As far as we can tell, the PSF's policy hasn't been updated since 2015,
> so it predates GDPR. Is anyone working on it and is there anything we
> should know?
> 
>  Terri
> 
> ___
> pydotorg-www mailing list
> pydotorg-www@python.org
> https://mail.python.org/mailman/listinfo/pydotorg-www

-- 
Marc-Andre Lemburg
eGenix.com

Professional Python Services directly from the Experts
>>> Python Projects, Coaching and Consulting ...  http://www.egenix.com/
>>> Python Database Interfaces ...   http://products.egenix.com/
>>> Plone/Zope Database Interfaces ...   http://zope.egenix.com/


::: We implement business ideas - efficiently in both time and costs :::

   eGenix.com Software, Skills and Services GmbH  Pastor-Loeh-Str.48
D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg
   Registered at Amtsgericht Duesseldorf: HRB 46611
   http://www.egenix.com/company/contact/
  http://www.malemburg.com/

___
pydotorg-www mailing list
pydotorg-www@python.org
https://mail.python.org/mailman/listinfo/pydotorg-www


[pydotorg-www] GDPR policy for Python.org?

2020-07-08 Thread Terri Oda

Hey all,

The Python Google Summer of Code team is trying to make sure we're 
compliant with GDPR, particularly because we're updating the blogging 
system that stores student weekly reports so now's a good time to review 
any data storage policy.


As far as we can tell, the PSF's policy hasn't been updated since 2015, 
so it predates GDPR. Is anyone working on it and is there anything we 
should know?


 Terri

___
pydotorg-www mailing list
pydotorg-www@python.org
https://mail.python.org/mailman/listinfo/pydotorg-www