Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-61018

LTI GDPR information

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Minor
    • Resolution: Deferred
    • Affects Version/s: 3.1.9, 3.2.6, 3.3.3, 3.4, 3.5
    • Fix Version/s: None
    • Labels:
    • Affected Branches:
      MOODLE_31_STABLE, MOODLE_32_STABLE, MOODLE_33_STABLE, MOODLE_34_STABLE, MOODLE_35_STABLE

      Description

      Considering that in Moodle any teacher can add an LTI activity to a course without going through the site administrator, it makes it impossible for the site administrator to include all 3rd party tools in it's privacy policy. 

      Nonetheless, the GDPR law doesn't require for it to be in the privacy policy, it requires that the user is informed and has the ability to consent to the data sharing before the data is shared & the ability to withdraw that consent. As such, as part of the launch of an LTI activity in Moodle there should be the ability to have a prompt which would seek the consent from the student before they are directed to the lti tool which informs them of what data is going to be shared, how it's going to be processed, etc.

      This could be added to the LTI activity settings with a toggle to enable, and a text field to provide the information. A Site level toggle should also be implemented to enforce the use of this if the site must comply with GDPR.

       

       

       

       

        Attachments

          Activity

            People

            • Assignee:
              dobedobedoh Andrew Nicols
              Reporter:
              aspark Alistair Spark
              Participants:
              Component watchers:
              Adrian Greeve, Mihail Geshoski, Peter Dias
            • Votes:
              5 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: