[wp-trac] [WordPress Trac] #43546: Add to the privacy tools UX a means to export personal data by username or email address

[WordPress Trac]

#43546: Add to the privacy tools UX a means to export personal data by username or
email address
--------------------------------+-----------------------
 Reporter:  allendav            |       Owner:  allendav
     Type:  enhancement         |      Status:  assigned
 Priority:  normal              |   Milestone:  4.9.6
Component:  General             |     Version:  trunk
 Severity:  normal              |  Resolution:
 Keywords:  gdpr needs-testing  |     Focuses:
--------------------------------+-----------------------

Comment (by azaozz):

 @iandunn  43546.11.diff looks good. I only committed the unit test fix to
 calm down Travis :)

 Been wondering how to best handle the personal data export. Having a
 secret download link to a zipped file would be a pretty good UX but has
 some drawbacks as noted above (needs cleanup, eventual leaks...).

 Another alternative would be for the admin to always download the zipped
 export and give it to the user in some other way, either email it or share
 it (dropbox, google drive, etc.). Doing this will require more "handling"
 from the admin but will remove all of the above security concerns
 (assuming sharing personal data through email or third party services is
 acceptable).

 Another option we should probably consider is password protecting the zip
 archive. As far as I see the only way this can be done reliably is to
 instruct the admin to download the zip and compress it again with a
 password, then email the password separately to the user.

 Of course all of this can be done automatically on the server, but will
 probably need shell access, so seems it's a plugin material.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43546#comment:32>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform