Page MenuHomePhabricator
Create Task
Maniphest T185470

[Tracking] GDPR/Privacy at WMSE
Open, Needs TriagePublic
Actions

Description

This task used to be dedicated to the pre-25 May 2018 work to make WMSE GDPR compliant but has been expanded to serve as tracking task for any new (or old) tasks related to GDPR/Privacy issues where routines/documentation need to be created or updated.

Note that tasks related to individual action (performing the yearly purge, following up on a data breach or a data deletion request) should not use this as a tracking task. The focus on this tracking task are issues where we as an organisation need to develop.

Related Objects
Search...

StatusSubtypeAssignedTask
 OpenNoneT185470 [Tracking] GDPR/Privacy at WMSE
 ResolvedLokal_ProfilT185474 Ensure GDPR compatibility of Zynatic and our use of it
 ResolvedNoneT189094 Sign personuppgiftsbiträdesavtal with Zynatic
 ResolvedJopparnT189097 Policy for members lacking essential information or consents
 ResolvedLokal_ProfilT194017 Send out call for giving consent in Zynatic
 OpenNoneT189098 Create routine for ensuring parental consent for underaged members
 ResolvedLokal_ProfilT194033 Get parental consent for underaged members
 ResolvedLokal_ProfilT195237 Create parental consent form
 ResolvedNoneT189296 Enable 2FA in Zynatic
 ResolvedJopparnT190305 Routine for cancelled memberships
 OpenNoneT186805 Investigate Dashboard GDPR compatability
 ResolvedJopparnT187788 Policy for @wikimedia.se e-mail addresses
 ResolvedLokal_ProfilT187787 Set up function mail address for tech
 ResolvedLokal_ProfilT189102 Sign personuppgiftsbiträdesavtal with Opad
 DeclinedNoneT189180 Sign personuppgiftsbiträdesavtal with Tranås resebyrå
 Resolved• Evelina-Bang-WMSET189188 Sign personuppgiftsbiträdesavtal with Bahnhof
 ResolvedLokal_ProfilT189469 Investigate personuppgiftsbiträdesavtal with Fortnox
 ResolvedNoneT192556 Inventory of FSdata and Glesys
 ResolvedSebastian_Berlin-WMSET207172 Create inventory document for technical systems
 DeclinedNoneT194022 Investigate OTRS - GDPR compatibility
 ResolvedJopparnT194235 Sign personuppgiftsbiträdesavtal with GleSYS
 ResolvedJopparnT195234 Move files to Nextcloud
 ResolvedJopparnT194619 Suggestions for Nextcloud file structure
 OpenNoneT198060 Create Privacy page for Wikimini
 OpenNoneT207800 Create a template consent for participations at events
 OpenNoneT207135 Review "rensningsrutin" related to employee and job applicant data
 ResolvedNoneT231868 Write a text and rensningsrutin for volunteers
 ResolvedLokal_ProfilT231324 Add rensningsrutin for donation information
 OpenNoneT230863 Review what personal information WMSE gathers from members
 OpenNoneT205430 Investigate GDPR related searches of GSuite dump
 Resolved• Evelina-Bang-WMSET225490 Add newsletter and Mailchimp to our Privacy policy (incl. subpages)
 ResolvedLokal_ProfilT232202 Update rensingsrutin for Press
 ResolvedEric_Luth_WMSET244247 Update the privacy policy with a section about volunteers
 ResolvedEric_Luth_WMSET244248 Develop a consent text for volunteers
 ResolvedEric_Luth_WMSET244249 Develop a rensningsrutin for volunteers
 ResolvedLokal_ProfilT247819 Create data purge instructions for Volontärregister
 ResolvedEric_Luth_WMSET244250 Describe purpose of volunteer register
 OpenNoneT244251 Clarify routines for event invitations
 OpenNoneT246448 Describe a clear routine for handling of volunteer data
 ResolvedLokal_ProfilT259334 Update Privacy policy
 OpenNoneT232441 Clarify policy on family memberships
 ResolvedLokal_ProfilT256962 Add Scrive to Privacy documentation
 ResolvedLokal_ProfilT303815 Determine suitable data retention for Scrive
 ResolvedLokal_ProfilT341867 Create basic categories for Scrive documents and document how each of these should be archived
DeclinedLokal_ProfilT265343 Disable Kund for time registering
 OpenNoneT287489 GDPR document for staff hiring ("Personuppgiftspolicy – Behandling av anställdas personuppgifter")
 OpenNoneT323500 Look over routine for handling Id-dokuments linked to the technology pool
 ResolvedLokal_ProfilT342522 Activate retention plan for signed Scrive documents
 OpenNoneT346203 Mötesplats OER site reports cookie compliance issues

Event Timeline

Lokal_Profil created this task.Jan 22 2018, 11:24 AM
Lokal_Profil added a subtask: T185474: Ensure GDPR compatibility of Zynatic and our use of it.Jan 22 2018, 11:32 AM
Lokal_Profil added subscribers: Jopparn, SaraMortsell, AxelPettersson_WMSE, • Evelina-Bang-WMSE.Jan 22 2018, 11:35 AM

I've added more of you to this one as I'm sure this is something which will involve tasks by each of us.

Lokal_Profil added a project: Tracking-Neverending.Feb 1 2018, 2:02 PM
Aklapper removed a project: Tracking-Neverending.Feb 1 2018, 6:15 PM
Aklapper subscribed.

Not Tracking-Neverending per its definition as it has an ending. Maybe Epic or Goal though?

Lokal_Profil added a subtask: T187788: Policy for @wikimedia.se e-mail addresses.Feb 20 2018, 3:06 PM
Lokal_Profil added a subtask: T189102: Sign personuppgiftsbiträdesavtal with Opad.Mar 7 2018, 10:44 AM
Lokal_Profil added a subtask: T189180: Sign personuppgiftsbiträdesavtal with Tranås resebyrå.Mar 8 2018, 8:04 AM
Lokal_Profil added a subtask: T189188: Sign personuppgiftsbiträdesavtal with Bahnhof.Mar 8 2018, 9:47 AM
Lokal_Profil moved this task from 📥 Backlog to 👁 Watching on the User-LokalProfil board.Mar 9 2018, 8:27 AM
Lokal_Profil edited projects, added WMSE-Organisational-Development-2018; removed WMSE.Mar 12 2018, 11:32 AM
Lokal_Profil moved this task from Backlog to Blocked on the WMSE-Organisational-Development-2018 board.
Lokal_Profil added a subtask: T189469: Investigate personuppgiftsbiträdesavtal with Fortnox.Mar 12 2018, 11:50 AM
Lokal_Profil closed subtask T189469: Investigate personuppgiftsbiträdesavtal with Fortnox as Resolved.Apr 6 2018, 7:15 AM
Lokal_Profil added a subscriber: Historiker.
Lokal_Profil closed subtask T189180: Sign personuppgiftsbiträdesavtal with Tranås resebyrå as Declined.Apr 10 2018, 6:12 AM
Jopparn updated the task description. (Show Details)Apr 18 2018, 3:48 PM
Lokal_Profil added a subtask: T192556: Inventory of FSdata and Glesys.Apr 19 2018, 2:56 PM
Lokal_Profil added a subtask: T194235: Sign personuppgiftsbiträdesavtal with GleSYS.May 9 2018, 6:38 AM
JeanFred subscribed.May 22 2018, 9:22 AM
Lokal_Profil closed subtask T194235: Sign personuppgiftsbiträdesavtal with GleSYS as Resolved.May 25 2018, 10:03 AM
Jopparn closed subtask T195234: Move files to Nextcloud as Resolved.May 25 2018, 4:26 PM
• Evelina-Bang-WMSE closed subtask T189102: Sign personuppgiftsbiträdesavtal with Opad as Resolved.Jun 7 2018, 1:14 PM
Lokal_Profil closed subtask T194022: Investigate OTRS - GDPR compatibility as Declined.Jun 28 2018, 8:15 AM
• Vvjjkkii reopened subtask T195234: Move files to Nextcloud as Open.Jul 1 2018, 1:08 AM
• Vvjjkkii reopened subtask T194235: Sign personuppgiftsbiträdesavtal with GleSYS as Open.Jul 1 2018, 1:11 AM
• Vvjjkkii reopened subtask T194022: Investigate OTRS - GDPR compatibility as Open.
CommunityTechBot closed subtask T194235: Sign personuppgiftsbiträdesavtal with GleSYS as Resolved.Jul 1 2018, 3:05 PM
CommunityTechBot closed subtask T195234: Move files to Nextcloud as Resolved.Jul 1 2018, 4:32 PM
CommunityTechBot closed subtask T194022: Investigate OTRS - GDPR compatibility as Declined.Jul 2 2018, 4:22 PM
Lokal_Profil moved this task from Blocked to GDPR preparations on the WMSE-Organisational-Development-2018 board.Jul 3 2018, 1:17 PM
Lokal_Profil edited projects, added WMSE-Organisational-Development-2018 (GDPR preparations); removed WMSE-Organisational-Development-2018.
Lokal_Profil moved this task from Backlog to Blocked on the WMSE-Organisational-Development-2018 (GDPR preparations) board.
Sebastian_Berlin-WMSE closed subtask T192556: Inventory of FSdata and Glesys as Resolved.Oct 29 2018, 8:51 AM
Jopparn edited projects, added WMSE-Organisational-Development-2019; removed WMSE-Organisational-Development-2018 (GDPR preparations).Jan 29 2019, 9:21 AM
Jopparn moved this task from Backlog to Blocked on the WMSE-Organisational-Development-2019 board.
Jopparn closed subtask T187788: Policy for @wikimedia.se e-mail addresses as Resolved.May 13 2019, 1:25 PM
Lokal_Profil closed subtask T189188: Sign personuppgiftsbiträdesavtal with Bahnhof as Resolved.Jul 12 2019, 8:38 AM
Lokal_Profil added a subtask: T207135: Review "rensningsrutin" related to employee and job applicant data.Sep 6 2019, 8:12 AM
Lokal_Profil added a subtask: T231868: Write a text and rensningsrutin for volunteers.
Lokal_Profil added a subtask: T231324: Add rensningsrutin for donation information.
Lokal_Profil added a subtask: T230863: Review what personal information WMSE gathers from members.Sep 6 2019, 8:15 AM
Lokal_Profil renamed this task from [Tracking] GDPR preparation at WMSE to [Tracking] GDPR/Privacy at WMSE.Sep 6 2019, 8:21 AM
Lokal_Profil added a project: Tracking-Neverending.
Lokal_Profil updated the task description. (Show Details)
Lokal_Profil added a subtask: T205430: Investigate GDPR related searches of GSuite dump.
Lokal_Profil added a subtask: T225490: Add newsletter and Mailchimp to our Privacy policy (incl. subpages).
Lokal_Profil closed subtask T225490: Add newsletter and Mailchimp to our Privacy policy (incl. subpages) as Resolved.Sep 30 2019, 10:43 AM
Jopparn closed subtask T232202: Update rensingsrutin for Press as Resolved.Dec 2 2019, 10:03 AM
Sebastian_Berlin-WMSE edited projects, added WMSE-Organisational-Development-2020; removed WMSE-Organisational-Development-2019.Jan 16 2020, 2:39 PM
Sebastian_Berlin-WMSE moved this task from Backlog to Blocked on the WMSE-Organisational-Development-2020 board.
Eric_Luth_WMSE closed subtask T231868: Write a text and rensningsrutin for volunteers as Resolved.Feb 11 2020, 4:16 PM
Lokal_Profil added a subtask: T244247: Update the privacy policy with a section about volunteers.Feb 28 2020, 1:57 PM
Sebastian_Berlin-WMSE removed a project: User-Sebastian_Berlin-WMSE.Mar 10 2020, 12:01 PM
Jopparn closed subtask T244247: Update the privacy policy with a section about volunteers as Resolved.Apr 6 2020, 8:45 AM
Jopparn added a subtask: T259334: Update Privacy policy.Aug 9 2020, 8:11 AM
Jopparn added a subtask: T232441: Clarify policy on family memberships.
Lokal_Profil added a subtask: T256962: Add Scrive to Privacy documentation.Aug 10 2020, 1:08 PM
Lokal_Profil closed subtask T259334: Update Privacy policy as Resolved.Sep 18 2020, 6:07 AM
Lokal_Profil added a subtask: T265343: Disable Kund for time registering.Oct 13 2020, 10:52 AM
Lokal_Profil closed subtask T231324: Add rensningsrutin for donation information as Resolved.Dec 14 2020, 12:06 PM
Jopparn edited projects, added WMSE-Organisational-Development-2021; removed WMSE-Organisational-Development-2020.Jan 13 2021, 7:32 AM
Jopparn moved this task from Backlog to Blocked on the WMSE-Organisational-Development-2021 board.
Jopparn removed a subscriber: • Evelina-Bang-WMSE.
Lokal_Profil closed subtask T185474: Ensure GDPR compatibility of Zynatic and our use of it as Resolved.Feb 24 2021, 11:41 PM
Lokal_Profil closed subtask T265343: Disable Kund for time registering as Declined.Mar 2 2021, 10:07 AM
Aklapper edited projects, added Epic; removed Tracking-Neverending.Nov 12 2021, 4:51 PM

This is not neverending by definition; removing tag.

Jopparn added a comment.Nov 12 2021, 7:59 PM
In T185470#7500586, @Aklapper wrote:

This is not neverending by definition; removing tag.

Could you please clarify how you mean? We will continue to work on ensuring compliance with GDPR and on ensuring privacy in our organization's work. This is intended to continue as long as the organization/legislation stays in place. As such it was our interpretation that the task fits the description for a "Tag for marking tasks which will never be "fixed"". Thanks

Aklapper edited projects, added Tracking-Neverending; removed Epic.Nov 14 2021, 7:19 PM

@Jopparn: Ah, sorry - it looked to me that this can be declared resolved once all subtasks are resolved.
If this is really a "neverending" categorization of work, then it should preferably be a (sub)project instead.

Jopparn edited projects, added WMSE-Organisational-Development-2022; removed WMSE-Organisational-Development-2021.Feb 6 2022, 9:42 PM
Lokal_Profil added a subtask: T323500: Look over routine for handling Id-dokuments linked to the technology pool.Nov 21 2022, 2:26 PM
Jopparn edited projects, added WMSE-Development-of-the-association-2023; removed WMSE-Organisational-Development-2022.May 30 2023, 8:34 AM
Lokal_Profil closed subtask T256962: Add Scrive to Privacy documentation as Resolved.Sep 8 2023, 9:24 AM
Lokal_Profil closed subtask T342522: Activate retention plan for signed Scrive documents as Resolved.Feb 8 2024, 8:05 AM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL