Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-67529

GDPR: Option to filter which courses are included in data requests

XMLWordPrintable

    • MOODLE_400_STABLE, MOODLE_403_STABLE
    • MOODLE_403_STABLE
    • MDL-67529-master
    • Hide

      Setup:

      1. Navigate to "Administration / Users / Privacy and policies / Privacy settings
      2. Select option "Allow filtering of exports by course"
      3. Enable "Contact the privacy officer" too
      4. Create new user "student"
      5. Create three courses "course 1", "course 2" and "course 3"
      6. Create two forums "forum 1" for "course 1", "forum 2" for "course 2".
      7. Enrol "student" to "course 1" and "course 2"
      8. Login as "student" and create new discussion for "forum 1" and "forum 2".

      Case 1: Check export all data.

      1. Logged in as admin, go to Users / Privacy and policies / Data requests
      2. Create a new export data request for "student" current status should be "Pending"
      3. Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval"
      4. Expand the "Actions" drop down, select "Approve request (all data)" status should be change to "Approved"
      5. Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Download ready".
      6. Download and extract the exported data, check someuser data and data belong to "course 1" and "course 2" should exist. (You can find the course data inside 'System' and the relevant 'Category' folders. User data is inside 'System' and then a 'User' folder.)
         
        Case 2: Check filter data before export.
      7. Logged in as admin, go to Users / Privacy and policies / Data requests
      8. Create a new export data request for "student", current status should be "Pending"
      9. Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval"
      10. Expand the "Actions" drop down, select "Approve request (data from selected courses)"; a 'Select courses to export' popup form should appear.
      11. Check options in "Select courses to export" box; "course 1" and "course 2" option should exist while "course 3" is not (because user does not have data in that course).
      12. Select "course 1" then press "Approve request", form should disappear and current status should be "Approved"
      13. Run the cron job (or wait for cron to run if configured), status should be changed to "Download ready".
      14. Download the export data, check that data belong to "course 2" should not exist (otherwise it should be approximately the same as last export, for example the forum discussion information within course 1 should still be present).
      Show
      Setup: Navigate to "Administration / Users / Privacy and policies / Privacy settings Select option "Allow filtering of exports by course" Enable "Contact the privacy officer" too Create new user "student" Create three courses "course 1", "course 2" and "course 3" Create two forums "forum 1" for "course 1", "forum 2" for "course 2". Enrol "student" to "course 1" and "course 2" Login as "student" and create new discussion for "forum 1" and "forum 2". Case 1: Check export all data. Logged in as admin, go to Users / Privacy and policies / Data requests Create a new export data request for "student" current status should be "Pending" Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval" Expand the "Actions" drop down, select "Approve request (all data)" status should be change to "Approved" Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Download ready". Download and extract the exported data, check someuser data and data belong to "course 1" and "course 2" should exist. (You can find the course data inside 'System' and the relevant 'Category' folders. User data is inside 'System' and then a 'User' folder.)   Case 2: Check filter data before export. Logged in as admin, go to Users / Privacy and policies / Data requests Create a new export data request for "student", current status should be "Pending" Run cron job (or wait for cron to run if configured) and reload the page, status should be changed to "Awaiting approval" Expand the "Actions" drop down, select "Approve request (data from selected courses)"; a 'Select courses to export' popup form should appear. Check options in "Select courses to export" box; "course 1" and "course 2" option should exist while "course 3" is not (because user does not have data in that course). Select "course 1" then press "Approve request", form should disappear and current status should be "Approved" Run the cron job (or wait for cron to run if configured), status should be changed to "Download ready". Download the export data, check that data belong to "course 2" should not exist (otherwise it should be approximately the same as last export, for example the forum discussion information within course 1 should still be present).

      Following the demonstration/training with our Information Rights team (basically our Data Protection and Freedom of Information staff), they have fed back that whole-system exports are generally far too much data.
       
      A very common request from students is: "Please send me all data from my current module website", or "Please send me all my data from forum posts on my current and previous two modules".
       
      So it would be desireable for those in the Data Protection role to be able to select which whether it is 'All' or be able to select specific course data to export.

            quen Sam Marshall
            kietlyc Kiet Ly
            Sam Marshall Sam Marshall
            Andrew Lyons Andrew Lyons
            Kim Jared Lucas Kim Jared Lucas
            Votes:
            2 Vote for this issue
            Watchers:
            18 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - 0 minutes
                0m
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 2 days, 41 minutes
                2d 41m

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.