[wp-trac] [WordPress Trac] #48794: Feature Request - Is PII? for User Meta

WordPress Trac noreply at wordpress.org
Thu Jan 23 20:25:07 UTC 2020


#48794: Feature Request - Is PII? for User Meta
-----------------------------+-------------------------
 Reporter:  bhubbard         |       Owner:  (none)
     Type:  feature request  |      Status:  closed
 Priority:  normal           |   Milestone:
Component:  Users            |     Version:
 Severity:  normal           |  Resolution:  worksforme
 Keywords:                   |     Focuses:  privacy
-----------------------------+-------------------------
Changes (by xkon):

 * status:  new => closed
 * resolution:   => worksforme
 * milestone:  Awaiting Review =>


Comment:

 Hi @bhubbard!

 After a discussion with @garrett-eclipse I wanted to update this in full.

 Core already has implementations for Exporters & Erasers since the first
 release of the component on which plugins can add their data to be
 exported on erased. See https://developer.wordpress.org/plugins/privacy
 /adding-the-personal-data-eraser-to-your-plugin/ and
 https://developer.wordpress.org/plugins/privacy/adding-the-personal-data-
 exporter-to-your-plugin/ .

 As far as I can understand the use-case is similar if not 100% the same
 and it's simply for identifying PII from the perspective of a plugin.

 On a further note, altering the database and adding a permanent marker
 that something is actually PII  makes it wat easier for malicious code to
 do its dirty job. At the moment there isn't any pointing factor to what a
 dataset is (PII or not) up to the point that the erasers/exporters are
 running and plugins are just hooking in to take care of their data as well
 (this excludes any default Core data that is predefined obviously and well
 known).

 Also, there's no need, in general, to alter the DB schema just for this in
 my opinion, there are other ways that this could be achieved if it's truly
 needed.

 I'm closing this as I think that we're already covering all aspects but
 feel free to reply back if further discussion is needed!

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48794#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list