Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-61018

LTI GDPR information

    XMLWordPrintable

    Details

    • Type: New Feature
    • Status: Closed
    • Priority: Minor
    • Resolution: Deferred
    • Affects Version/s: 3.1.9, 3.2.6, 3.3.3, 3.4, 3.5
    • Fix Version/s: None
    • Labels:
    • Affected Branches:
      MOODLE_31_STABLE, MOODLE_32_STABLE, MOODLE_33_STABLE, MOODLE_34_STABLE, MOODLE_35_STABLE

      Description

      Considering that in Moodle any teacher can add an LTI activity to a course without going through the site administrator, it makes it impossible for the site administrator to include all 3rd party tools in it's privacy policy. 

      Nonetheless, the GDPR law doesn't require for it to be in the privacy policy, it requires that the user is informed and has the ability to consent to the data sharing before the data is shared & the ability to withdraw that consent. As such, as part of the launch of an LTI activity in Moodle there should be the ability to have a prompt which would seek the consent from the student before they are directed to the lti tool which informs them of what data is going to be shared, how it's going to be processed, etc.

      This could be added to the LTI activity settings with a toggle to enable, and a text field to provide the information. A Site level toggle should also be implemented to enforce the use of this if the site must comply with GDPR.

       

       

       

       

        Attachments

          Activity

            People

            Assignee:
            dobedobedoh Andrew Nicols
            Reporter:
            aspark Alistair Spark
            Participants:
            Component watchers:
            Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias
            Votes:
            5 Vote for this issue
            Watchers:
            11 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: