[wp-trac] [WordPress Trac] #46343: Legal issue on GDPR and WP "privacy" processes

[WordPress Trac]

#46343: Legal issue on GDPR and WP "privacy" processes
--------------------------+----------------------
 Reporter:  arena         |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Privacy       |     Version:  trunk
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+----------------------
Changes (by garrett-eclipse):

 * keywords:  needs-privacy-review =>
 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Thanks @arena

 I appreciate you raising the issue, but will close this as this isn't a
 privacy issue in core but rather an issue caused by customizations either
 via a plugin or your own code which has introduced email support beyond
 the existing support of is_email. If you've introduced emails to your
 system that fail the is_email check then you can customize the check via
 it's filter, as @swissspidy mentioned, documented here;
 https://developer.wordpress.org/reference/hooks/is_email/

 In a clean core setup the is_email check is run for both user registration
 and comment creation so users are prohibited from submitting data
 associated to an email that doesn't pass the is_email check meaning all
 valid information submitted to WP is exportable/erasable. If your
 customizations circumvent this check then you'll have to customize the
 GDPR tools to also circumvent this. I tested both of your examples
 (Dörte at example.com & θσερ@εχαμπλε.ψομ) in a clean install and they're both
 blocked from signups and commenting.

 So the privacy concern you're raising is with your customizations and not
 core itself.

 The only core concern here is the support of RFC compliant emails which
 I've re-opened #17491 to be addressed there.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/46343#comment:10>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform