Details
-
Type:
Improvement
-
Status: Closed
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: 3.1
-
Fix Version/s: 3.2
-
Component/s: Blocks
-
Testing Instructions:
-
Difficulty:Easy
-
Affected Branches:MOODLE_31_STABLE
-
Fixed Branches:MOODLE_32_STABLE
-
Pull from Repository:
-
Pull Master Branch:
MDL-54891-master -
Pull Master Diff URL:
Description
Originally raised as a concern at https://moodle.org/mod/forum/discuss.php?d=334550
The Activity Results block displays to viewers the grades of students who undertook an assignment. This has been viewed (by our Data Protection Team) as being not compatible with the data protection rules, so the feature should be disabled.
The main problem is that it displays personally identifiable information (i.e. the name of the student) and the grade they achieved, not to the student but to anyone.
Arguably this may be acceptable if the student has given consent for this, but there is no mechanism to gain this within the block, so would be up to the Institution to acquire this consent.
It would be helpful if the module did flag up that there are potential data protection issues with this module (and I suspect there may be other modules that raise similar concerns).