Is NodeBB compliant with the GDPR (the newest legislative spam by the EU)?

[TLINDEN]

I think NodeBB as of now is not compliant. One important caveat is that it includes resources from external websites such as Twitter (for bootstrap). As already posted somewhere else, it should be possible to host that stuff locally.

I would also disable external logins to be sure.

Another problem would be if a user want's to have her data. That's not possible with NodeBB yet (afaik) but could be done with database tools.

One more thing: the EU considers a site to be addressing EU citizens if it provides content in one of the 27 EU languages. While this is nonsense they enforce this nevertheless.

best,
Tom

[julian]

Hm... I don't think we remotely fetch bootstrap anymore... possibly Google Fonts, but that is a Persona thing.

User data export is something we ought to build out anyway, and if it is mandated, then even more so.

[azeus]

@Julian I've seen this So is it ready now ?

[julian]

@azeus ... almost -- NodeBB v1.9.0 should contain the code necessary to comply with GDPR.

Individual hosts of NodeBB will need to do the last-mile items, such as getting a Data Processing Agreement in place, and such, but otherwise, yes.

We'll be launching v1.9.0 today

[azeus]

@julian said in Is NodeBB compliant with the GDPR (the newest legislative spam by the EU)?:

e, and such, but otherwise, yes.
We'll be launching v1.9.0 today

Awesome, you guys rox ^^

[azeus]

Hi @Julian, we just upgraded to v1.9.0. Where could we find the GDPR related settings? We don't find anything in the Admin Panel Tks

[FrankM]

@azeus said in Is NodeBB compliant with the GDPR (the newest legislative spam by the EU)?:

Hi @Julian, we just upgraded to v1.9.0. Where could we find the GDPR related settings? We don't find anything in the Admin Panel Tks

Hi @azeus , register an new user an you will see it. And look into your profil.

sry, text in german

[azeus]

@frankm thank you

[julian]

@azeus We'll be releasing a corresponding plugin with ACP integration to see consent values and to request consent from existing users in the coming days/week

[julian]

GitHub - NodeBB/nodebb-plugin-gdpr: GDPR Compliance Tools and Administrative Overview Pages

GDPR Compliance Tools and Administrative Overview Pages - NodeBB/nodebb-plugin-gdpr

GitHub (github.com)

[Jenkler]

Do we need this GDPR plugin or is it good enough to upgrade to 1.9.1 to get the consent popup?

[Jenkler]

Sorry, checked out the link

Plugin is for managing GDPR and the forum will ask for consent for all new users. So if i setup a new forum this plugin is not necessary but can be good to have

[julian]

@jenkler Yes that's correct. The plugin is a transitional plugin for forums with existing users who have not consented. All new users are required to provide consent now, irregardless of plugin installation.

[Jenkler]

Cool, thanks