[wp-meta] [Making WordPress.org] #7403: Plugin Directory: Field on plugin info page for GDPR data collection Privacy

[Making WordPress.org]

#7403: Plugin Directory: Field on plugin info page for GDPR data collection
Privacy
------------------------------+-----------------------
 Reporter:  brothman01        |       Owner:  (none)
     Type:  enhancement       |      Status:  reopened
 Priority:  normal            |   Milestone:
Component:  Plugin Directory  |  Resolution:
 Keywords:                    |
------------------------------+-----------------------

Comment (by alanfuller):

 The original proposal to have a yes / no is too simplistic to be of any
 use, regardless of the fact that plugins should not be sending data
 without consent. Also the concept "Collects Data" goes beyond sending data
 and covers storing data locally, which plugins can of course do, but again
 too simplistic to be of any use regarding privacy laws.  Most privacy laws
 relate to personal data,not any old data.

 A section in the readme is a valid way of communicating functionality and
 many plugins already do this when they think it is important.


 I don't think there is any shortcut for due diligence of the plugin user
 and forcing plugin authors to warrant compliance with any law  would be
 rather against the GPL wording, namely

 "THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
 APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
 HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM “AS IS” WITHOUT WARRANTY
 OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
 THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
 IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
 ALL NECESSARY SERVICING, REPAIR OR CORRECTION."

-- 
Ticket URL: <https://meta.trac.wordpress.org/ticket/7403#comment:4>
Making WordPress.org <https://meta.trac.wordpress.org/>
Making WordPress.org