Ensure GDPR compatibility of Zynatic and our use of it
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Lokal_Profil
	Jan 22 2018, 11:32 AM

Description

With the switch to the Zynatic membership system most GDPR issues should be resolved.

See e.g.: https://www.datainspektionen.se/lagar-och-regler/personuppgiftslagen/molntjanster/

We might however need the following:

Sign a "Personuppgiftsbiträdesavtal" T189094: Sign personuppgiftsbiträdesavtal with Zynatic
A solution for ensuring parental consent of under-aged members T189098: Create routine for ensuring parental consent for underaged members
A decision on how to handle any accounts without explicit permission (parental or data retention approval) when GDPR kicks in. T189097: Policy for members lacking essential information or consents
Ensure security corresponds to the sensitivity of the stored data T189296: Enable 2FA in Zynatic

Related Objects
Search...

Status	Assigned	Task
Open	None	T185470 [Tracking] GDPR/Privacy at WMSE
Resolved	Lokal_Profil	T172173 Set up Zynatic for Wikimedia Sverige membership register
Resolved	Lokal_Profil	T185474 Ensure GDPR compatibility of Zynatic and our use of it
Resolved	None	T189094 Sign personuppgiftsbiträdesavtal with Zynatic
Resolved	Jopparn	T189097 Policy for members lacking essential information or consents
Resolved	Lokal_Profil	T194017 Send out call for giving consent in Zynatic
Open	None	T189098 Create routine for ensuring parental consent for underaged members
Resolved	Lokal_Profil	T194033 Get parental consent for underaged members
Resolved	Lokal_Profil	T195237 Create parental consent form
Resolved	None	T189296 Enable 2FA in Zynatic
Resolved	Jopparn	T190305 Routine for cancelled memberships

Event Timeline

On uner-aged members:

Här behöver säkerställas att förälders/vårdnadshavares samtycke kan inhämtas och anges i medlemsregister. Vidare utredning krävs.

A possible solution is the introduction of a checkbox for "parental consent" and a (monthly?) routine for checking that any new member with an age < 16 has this field filled in within e.g. 1 month. Alternatively a text field where a reference to the logged consent can be fileld in.

Lokal_Profil mentioned this in T172173: Set up Zynatic for Wikimedia Sverige membership register.Jan 22 2018, 11:33 AM

Lokal_Profil added a parent task: T172173: Set up Zynatic for Wikimedia Sverige membership register.Feb 1 2018, 2:02 PM

Draft Personuppgiftsbiträdesavtal received

Lokal_Profil updated the task description. (Show Details)Feb 12 2018, 8:12 AM

Lokal_Profil updated the task description. (Show Details)Feb 12 2018, 10:48 AM

Lokal_Profil mentioned this in T186214: Send out call for membership renewal.Feb 12 2018, 10:51 AM

Zynatic are adding a mechanism for members to explicitly approve of us storing their personal data (and storing that approval).

It's unclear to me how we should handle new members who don't log in. Do we only need a tickbox for this on the paper forms? And can these somehow be linked to the member in Zynatic?

How do we deal with anyone who renews their membership by just pays in the fee (without logging in).

Lokal_Profil mentioned this in T185468: Create Zynatic content.Feb 15 2018, 10:32 AM

Lokal_Profil edited projects, added WMSE-Association-Involvement-2018; removed WMSE.

Lokal_Profil edited projects, added WMSE-Association-Involvement-2018 (Zynatic); removed WMSE-Association-Involvement-2018.

I have broken out the constituent parts as subtasks

Lokal_Profil moved this task from Backlog to In process on the WMSE-Association-Involvement-2018 (Zynatic) board.Mar 7 2018, 10:27 AM

Related to this is T189100: Create a new paper membership form

Lokal_Profil moved this task from 📥 Backlog to 👁 Watching on the User-Lokal_Profil board.Mar 9 2018, 8:28 AM

Lokal_Profil triaged this task as High priority.Apr 5 2018, 10:16 AM

Lokal_Profil added a subtask: T189296: Enable 2FA in Zynatic.Apr 16 2018, 8:29 AM

Lokal_Profil updated the task description. (Show Details)

Evelina-Bang-WMSE closed subtask T189094: Sign personuppgiftsbiträdesavtal with Zynatic as Resolved.Apr 20 2018, 6:56 AM

Lokal_Profil reopened subtask T189296: Enable 2FA in Zynatic as Open.Apr 27 2018, 12:44 PM

Lokal_Profil closed subtask T189296: Enable 2FA in Zynatic as Resolved.

Lokal_Profil renamed this task from Ensure Zynatic GDPR compatibility to Ensure GDPR compatibility of Zynatic and our use of it.May 7 2018, 9:50 AM

• SaraMortsell moved this task from Backlog to This week on the User-SaraMortsell board.May 25 2018, 9:47 AM

• SaraMortsell moved this task from This week to Done on the User-SaraMortsell board.May 25 2018, 9:57 AM

Jopparn closed subtask T189097: Policy for members lacking essential information or consents as Resolved.May 25 2018, 4:28 PM

Lokal_Profil added a subtask: T190305: Routine for cancelled memberships.Oct 23 2018, 8:08 PM

It would be great if the remaining subtasked could be solved during 2018. They are mainly about writing down the routines which makes the policies easy to live by as part of our everyday work.

Sebastian_Berlin-WMSE edited projects, added WMSE-Association-Involvement-2019 (Zynatic); removed WMSE-Association-Involvement-2018 (Zynatic).Apr 9 2019, 1:13 PM

Sebastian_Berlin-WMSE moved this task from Backlog to In process on the WMSE-Association-Involvement-2019 (Zynatic) board.Apr 9 2019, 1:13 PM

Jopparn removed a project: User-SaraMortsell.Dec 13 2019, 6:19 AM

Jopparn removed a subscriber: • SaraMortsell.

Sebastian_Berlin-WMSE edited projects, added WMSE-Association-Involvement-2020 (Zynatic); removed WMSE-Association-Involvement-2019 (Zynatic).Jan 16 2020, 1:29 PM

Sebastian_Berlin-WMSE moved this task from Backlog to In process on the WMSE-Association-Involvement-2020 (Zynatic) board.

Jopparn closed subtask T190305: Routine for cancelled memberships as Resolved.Jan 27 2020, 1:40 PM

Evelina-Bang-WMSE moved this task from Backlog to Någon annan on the User-Evelina-Bang-WMSE board.Feb 28 2020, 3:13 PM

Evelina-Bang-WMSE removed a project: User-Evelina-Bang-WMSE.Mar 11 2020, 6:35 AM

Evelina-Bang-WMSE unsubscribed.