@Nuria Try again now, I just added you to the project called "WMF-NDA-Requests" (https://phabricator.wikimedia.org/project/profile/974/) which seems like it's needed to allow you to sign (https://wikitech.wikimedia.org/wiki/Volunteer_NDA)
@gsingers We have three major types of NDA/MOU under which people get access to PII-sensitive data on our servers:
- Everyone who's WMF staff has signed an NDA as part of their work contract
- Researchers get access to some data after signing a MOU (with a person on the WMF side being a point of contact and time-limited until the research is completed)
- Some people from the community have signed an NDA (called the Volunteer NDA in contrast to the NDA which applies to staff) which allows them to e.g. debug problems in production, deploy code changes, review Logstash/Turnilo etc.
The volunteer NDA applies only to production servers and some web services which hold PII-sensitive data, it does not extend to anything operated by OIT/ITS (like no wikimedia.org address, no access to Google Docs, Betterworks, etc.).
If a staff member leaves, they have the option to sign the volunteer NDA (essentially replacing the NDA which they had previously upheld throught their work contract) if they want to resume some of their former technical work in a volunteer capacity (it's not the norm (maybe one out of four?), but we have quite a few cases of former staff members which stick around and help out). And each of those volunteer NDAs needs to be signed off by the person's manager.
Excellent, thanks! Closing this task since everything is completed now. I'll merge https://gerrit.wikimedia.org/r/c/operations/puppet/+/636936/ (along with updating LDAP groups) after Nuria's last day.