[wp-trac] [WordPress Trac] #48794: Feature Request - Is PII? for User Meta

[WordPress Trac]

#48794: Feature Request - Is PII? for User Meta
-----------------------------+------------------------------
 Reporter:  bhubbard         |       Owner:  (none)
     Type:  feature request  |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Users            |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:  privacy
-----------------------------+------------------------------

Comment (by bhubbard):

 I think the @dkarfa idea to have a field to share PII is not a bad one,
 but @kkarpieszuk was more right on with what I was going for.

 Many plugins add/define user meta, some of which is PII and some which is
 not. By having this new column on user_meta, plugin/theme developers can
 let everyone know if the meta they are setting is PII. While I could write
 a plugin to add this column and set this data, it would only be useful if
 heavily customized for a site. I would need to look at the data created by
 the plugins on the site, and make decisions for each. By having it in
 core, plugin/theme developers can set this per field they create for a
 user, at which point other developers and core can then decide how to
 handle PII data differently over data that is not PII.

 I understand this puts the burden on plugin/theme authors to decide which
 fields they add/modify are PII, but they should be the ones who can best
 make that decision (at least for the default setting).

 Defaults would need to be chosen for all user meta that is created by core
 WordPress. Some quick examples:

 {{{
 first_name = true
 last_name = true
 rich_editing = false
 syntax_highlighting = false
 use_ssl = false
 }}}


 Function like add_user_meta, would need new support for this column,
 example:
 {{{
 add_user_meta( int $user_id, string $meta_key, mixed $meta_value, bool
 $unique = false, bool $is_pii = false );
 }}}

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48794#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform