[wp-trac] [WordPress Trac] #43438: Export registered user's personal data on request

[WordPress Trac]

#43438: Export registered user's personal data on request
----------------------------+------------------
 Reporter:  azaozz          |       Owner:
     Type:  enhancement     |      Status:  new
 Priority:  normal          |   Milestone:  5.0
Component:  General         |     Version:
 Severity:  normal          |  Resolution:
 Keywords:  gdpr has-patch  |     Focuses:
----------------------------+------------------

Comment (by azaozz):

 Replying to [comment:14 allendav]:
 > There have been a few questions about why User Agent is personal data. I
 think we should include it because combined with IP address, you can
 probably identify a single device in a home or business and possibly then
 identify a user.

 You may be able to identify a device (with high probability of errors),
 but you cannot identify a person.

 > This also aligns with the definitions in Article 4(1) of the GDPR https
 ://gdpr-info.eu/art-4-gdpr/

 Right, the text there is:
 {{{
 ...an identifiable natural person is one who can be identified, directly
 or indirectly, in particular by reference to an identifier such as a name,
 an identification number, location data, an online identifier or to one or
 more factors specific to the physical, physiological, genetic, mental,
 economic, cultural or social identity of that natural person;
 }}}

 The things we are looking for here are:
 - a name
 - an identification number
 - location data
 - an online identifier
 of that natural person.

 Where is the identification of a software a person may or may not have
 used listed there? :)

 In any case, thinking we need to clear that with a lawyer.

 For the time being I agree we should probably err on the side of "safety"
 and include the browser UA.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/43438#comment:17>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform