[wp-trac] [WordPress Trac] #40794: WordPress needs a privacy policy

[WordPress Trac]

#40794: WordPress needs a privacy policy
----------------------------+-----------------------
 Reporter:  johnbillion     |       Owner:  pento
     Type:  task (blessed)  |      Status:  assigned
 Priority:  normal          |   Milestone:  4.9
Component:  Help/About      |     Version:
 Severity:  normal          |  Resolution:
 Keywords:                  |     Focuses:
----------------------------+-----------------------
Changes (by pento):

 * keywords:  has-patch i18n-change needs-testing =>


Comment:

 Thank you for the opinions, everyone! I'm checking in with legal folks to
 see where we're at. This will definitely be ready for 4.9, though!

 To address a few of the questions brought up:

 > The privacy page in it's current form doesn't seem to acknowledge that
 WordPress will send data about the site (multisite counts and user counts)
 to WordPress.org.

 The privacy page on w.org will go into detail about what's sent, I don't
 know what the exact wording for `privacy.php` in Core will be, it will
 likely continue to be a summary, with a pointer to the page on w.org.

 > The correct link is https://wordpress.org/about/privacy/

 Yup, this will need to be updated in Core once we have the final wording.

 > will there be an opt-out for users to *not* share anonymous data with
 WordPress.org?

 This ticket is just about the privacy policy. Discussion about filters,
 opt-outs, and the like should happen on #16778.

 > Anyone building a .org site which collects personal data and is subject
 to GDPR will need to disclose, in that site's privacy notice, what
 personal data (which, under GDPR, includes online identifiers) is being
 sent to wp.com and what control they have over the transmission of that
 information.

 Unless you install and activate Jetpack, data is only being sent to
 WP.org, not WP.com. WP.org is hosted on seperate infrastructure,
 Automattic employees do not generally have access to it. ''Some''
 Automattic employees (myself included) have access, but we absolutely do
 not share that data inside Automattic, my colleagues know better than to
 ask. 🙂

--
Ticket URL: <https://core.trac.wordpress.org/ticket/40794#comment:45>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform