Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-67529

GDPR: Option to filter which courses are included in data requests

    XMLWordPrintable

Details

    • MOODLE_400_STABLE, MOODLE_403_STABLE
    • MOODLE_403_STABLE
    • MDL-67529-master
    • Hide

      Setup:

      1. Navigate to "Administration / Users / Privacy and policies / Privacy settings
      2. Select option "Allow filtering of exports by course"
      3. Enable "Contact the privacy officer" too
      4. Create new user "student"
      5. Create three courses "course 1", "course 2" and "course 3"
      6. Create two forums "forum 1" for "course 1", "forum 2" for "course 2".
      7. Enrol "student" to "course 1" and "course 2"
      8. Login as "student" and create new discussion for "forum 1" and "forum 2".

      Case 1: Check export all data.

      1. Logged in as admin, go to Users / Privacy and policies / Data requests
      2. Create a new export data request for "student" current status should be "Pending"
      3. Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval"
      4. Expand the "Actions" drop down, select "Approve request (all data)" status should be change to "Approved"
      5. Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Download ready".
      6. Download and extract the exported data, check someuser data and data belong to "course 1" and "course 2" should exist. (You can find the course data inside 'System' and the relevant 'Category' folders. User data is inside 'System' and then a 'User' folder.)
         
        Case 2: Check filter data before export.
      7. Logged in as admin, go to Users / Privacy and policies / Data requests
      8. Create a new export data request for "student", current status should be "Pending"
      9. Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval"
      10. Expand the "Actions" drop down, select "Approve request (data from selected courses)"; a 'Select courses to export' popup form should appear.
      11. Check options in "Select courses to export" box; "course 1" and "course 2" option should exist while "course 3" is not (because user does not have data in that course).
      12. Select "course 1" then press "Approve request", form should disappear and current status should be "Approved"
      13. Run the cron job (or wait for cron to run if configured), status should be changed to "Download ready".
      14. Download the export data, check that data belong to "course 2" should not exist (otherwise it should be approximately the same as last export, for example the forum discussion information within course 1 should still be present).
      Show
      Setup: Navigate to "Administration / Users / Privacy and policies / Privacy settings Select option "Allow filtering of exports by course" Enable "Contact the privacy officer" too Create new user "student" Create three courses "course 1", "course 2" and "course 3" Create two forums "forum 1" for "course 1", "forum 2" for "course 2". Enrol "student" to "course 1" and "course 2" Login as "student" and create new discussion for "forum 1" and "forum 2". Case 1: Check export all data. Logged in as admin, go to Users / Privacy and policies / Data requests Create a new export data request for "student" current status should be "Pending" Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval" Expand the "Actions" drop down, select "Approve request (all data)" status should be change to "Approved" Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Download ready". Download and extract the exported data, check someuser data and data belong to "course 1" and "course 2" should exist. (You can find the course data inside 'System' and the relevant 'Category' folders. User data is inside 'System' and then a 'User' folder.)   Case 2: Check filter data before export. Logged in as admin, go to Users / Privacy and policies / Data requests Create a new export data request for "student", current status should be "Pending" Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval" Expand the "Actions" drop down, select "Approve request (data from selected courses)"; a 'Select courses to export' popup form should appear. Check options in "Select courses to export" box; "course 1" and "course 2" option should exist while "course 3" is not (because user does not have data in that course). Select "course 1" then press "Approve request", form should disappear and current status should be "Approved" Run the cron job (or wait for cron to run if configured), status should be changed to "Download ready". Download the export data, check that data belong to "course 2" should not exist (otherwise it should be approximately the same as last export, for example the forum discussion information within course 1 should still be present).

    Description

      Following the demonstration/training with our Information Rights team (basically our Data Protection and Freedom of Information staff), they have fed back that whole-system exports are generally far too much data.
       
      A very common request from students is: "Please send me all data from my current module website", or "Please send me all my data from forum posts on my current and previous two modules".
       
      So it would be desireable for those in the Data Protection role to be able to select which whether it is 'All' or be able to select specific course data to export.

      Attachments

        Issue Links

          Activity

            People

              quen Sam Marshall
              kietlyc Kiet Ly
              Sam Marshall Sam Marshall
              Andrew Lyons Andrew Lyons
              Kim Jared Lucas Kim Jared Lucas
              Votes:
              2 Vote for this issue
              Watchers:
              18 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - 0 minutes
                  0m
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 2 days, 41 minutes
                  2d 41m

                  Clockify

                    Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.