[wp-trac] [WordPress Trac] #44268: GDPR concerns on the core commenting flow

[WordPress Trac]

#44268: GDPR concerns on the core commenting flow
---------------------------+------------------------------
 Reporter:  patricedefago  |       Owner:  (none)
     Type:  enhancement    |      Status:  new
 Priority:  normal         |   Milestone:  Awaiting Review
Component:  Privacy        |     Version:  4.9.6
 Severity:  normal         |  Resolution:
 Keywords:  gdpr           |     Focuses:
---------------------------+------------------------------

Comment (by patricedefago):

 WordPress has already begun its compliance with data export capability, as
 well as other data related functions, and the creation of a privacy policy
 page.

 Why stop there?

 Data management concerns comments (among others), but it is not complete
 without this consent management.

 Replying to [comment:6 allendav]:
 > Providing a required checkbox and prompt concerning personal data
 processing before enabling the comment button presumes that a majority of
 site owners will be relying on consent as their lawful basis for
 processing comments. In core we are endeavoring to provide tools to assist
 the majority of sites with GDPR requirements, and it isn’t clear that a
 majority requires this basis. This particular use case might be better
 served by a plugin that extends the existing comment form.
 >
 > On the other hand, I do wonder if the majority would be served by adding
 static text, with a link to the privacy policy, at the bottom of the
 comment form. The text would be filterable and could be un-hooked if
 desired, e.g.
 >
 > "Before submitting your comment, please read our privacy policy."

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/44268#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform