[wp-trac] [WordPress Trac] #43437: Add way for registered users to request deletion or anonymization of their private data

[WordPress Trac]

#43437: Add way for registered users to request deletion or anonymization of their
private data
------------------------------+------------------
 Reporter:  azaozz            |       Owner:
     Type:  enhancement       |      Status:  new
 Priority:  normal            |   Milestone:  5.0
Component:  General           |     Version:
 Severity:  normal            |  Resolution:
 Keywords:  gdpr needs-patch  |     Focuses:
------------------------------+------------------

Comment (by mikejolley):

 So thinking about solutions to this. Some notes:

 1. Plugins need a way (hook?) to delete their own data for a user as well
 as core.
 2. Registered users are not the only people who need to delete data;
 visitors have the same rights, so this should be done by email.
 3. Some data needs to be preserved if there is a business need to hold it.
 E.g. Holding order data for tax purposes.

 With that in mind, the admin needs to be able to control what does and
 does not get deleted when dealing with a request. In order do to that,
 plugins and core need to expose what personal data they hold.

 My idea is that we:

 1. Agree on a schema which plugins may register to describe the personal
 data they hold for a user.
 2. Core loads in these schemas and presents a table to the admin user
 which shows what data is available to delete, and offers a checkbox/select
 to:
     - Delete/remove
     - Anonymize
     - Keep
 3. Admin selections are then passed to a hook for the delete event and
 each plugin takes care of it's data based on those preferences.

 Anything not exposed in this way would be up to the plugin to handle.

 Would a tool like I described about be suitable? Am I missing anything?

 cc @allendav

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43437#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform