User Data Protection guides

[tweakch]

GDPR compliancy is a BIG issue for companies and contractors dealing with user data and user consent in and outside of the EU.

There are similar regulations like CCPA that touch on the same topics...

The way developers are usually confronted with these topics in projects is that there is a bullet point in the non-functional requirements section that says:

• GDPR compliant

Or, within functional requirements

• opt-in and opt-out of marketing newsletters

GDPR and regulations alike are much, much broader than just Opt-In and Opt-Out of course, but these "user choices" is what devs have to deal with.

Over the past years, different schemas have emerged to capture consent. Details vary but these schemas look something like this:

{
  "person":{...},
  "data":{...},
  "consents": [
    {
      "purpose": "marketing",
      "channels": [...],
      "timestamp": "123456789",
      "retention": "12345",
      "value":"optin"
    },
    ...
  ]
}

Implementing GDPR compliancy is a PAIN in the 🍑 because in addition to storing these consent records per channel, you MUST do tons of business logic with them (ie value and retention) and provide the data in human readable form upon request. (SELECT * FROM 'gdpr.consents' t0 LEFT JOIN ... LEFT JOIN ... RIGHT JOIN ... is enough... but I mean... ugh...)

I'm in favour of data protection but I think they are being implemented in a wrong manner...

IMHO these consents should live on the blockchain and all I get is an addr where I can look them up and if I as a company act on these consents, I as a company am obliged to record what I used the consent for... Not use it and report upon request.

There are two (or three) scopes of interest here:

User, Developer, Company

The user wants to see and manage their consents in real time and not "upon request".

The developer wants to design websites and write code and not talk to legal about the wording of check box labels that give implicit over explicit consent.

Companies want to earn money and do whatever costs less to implement and maintain.

What do you think can we, as a developer portal, do to make life easier for devs, better and more protected for users and interesting or cost reducing for companies?

Additional resources
GDPR Summary
Not supported in consent string
Blockchain Privacy Poisoning

[tweakch]

What do you think can we, as a developer portal, do to make life easier for devs, better and more protected for users and interesting or cost reducing for companies?

I would like @admin-cf thoughts on this?

[katomm]

Please note that the admin-cf account is a special account to manage things, not necessarily associated with a specific user behind it.

[tweakch]

I see, thank you for the info.