Hi Joel, This is a really good question and one that I was wondering about myself, because of the recent flurry of GDPR related emails I've been getting.
I don't know if I can definitively answer this question, but I can speculate, so here goes! The main thrust of the GDPR is around protecting users personal information, especially as it pertains to analysis, processing and dissemination. Arches only collects enough personal information to support authentication. That information is only used for that purpose; it is neither analyzed nor disseminated (strictly speaking it is processed, which can mean simply storing it). One of the things that did jump out at me was the "Right to erasure (‘right to be forgotten’)" (https://gdpr-info.eu/art-17-gdpr/) . Right now, there is no way for an Arches end user to remove there identity from the system and there probably should be. Generally, it seems to me that the main burden is on the "Data Controller", and that seems to fall squarely on the implementer of Arches and not on the Arches software itself. Arches COULD be used to collect sensitive user data, but again, I believe at that point it would be up to the implementer to comply with the GDPR. If you are aware of any specific features of the GDPR that could be incorporated into Arches, I'd love to hear them, Cheers, Alexei Director of Web Development - Farallon Geographics, Inc. - 971.227.3173 On Wed, May 2, 2018 at 11:02 PM, Joel Aldor <joel.al...@gmail.com> wrote: > Hi Arches Team, > > I'd like to know if there are any plans to incorporate features for GDPR > compliance for organizations that uses Arches. GDPR is about to take effect > in a few weeks in the EU (in the Philippines, the Data Privacy Act, which > is 99% copied from GDPR, has been in full implementation since September of > last year), and we're concerned as to how personal data and sensitive > personal information of built heritage stakeholders can be protected. This > has now become a major concern for us regarding our future plans in > collecting heritage data. > > Hope to hear some answers from the project team. Thank you. > > Joel > > > -- > -- To post, send email to archesproject@googlegroups.com. To unsubscribe, > send email to archesproject+unsubscr...@googlegroups.com. For more > information, visit https://groups.google.com/d/forum/archesproject?hl=en > --- > You received this message because you are subscribed to the Google Groups > "Arches Project" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to archesproject+unsubscr...@googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- -- To post, send email to archesproject@googlegroups.com. To unsubscribe, send email to archesproject+unsubscr...@googlegroups.com. For more information, visit https://groups.google.com/d/forum/archesproject?hl=en --- You received this message because you are subscribed to the Google Groups "Arches Project" group. To unsubscribe from this group and stop receiving emails from it, send an email to archesproject+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
