GDPR Update

[dalekunce]

Plan for GDPR

• Disclaimer on website
• form on website to inform a blacklist of folks to not be shown on leaderboards
• update osm-state-workers/osm-stats-api to use blacklist

[danbjoseph]

is opt-out good enough? or do we have to get people to opt-in?

[kamicut]

• @dalekunce have you heard anything about the replication diffs themselves being walled off?

• There should also be a process for deleting user data from the MM database, maybe an admin control.

[dalekunce]

@danbjoseph my understanding is that we just need an opt-out. opt-in will be done by the data disclaimer.

@kamicut I think having some kinda of maintenance script to delete user but not contributions to totals will be needed.

[danbjoseph]

@rachblevine can you bring up this issue on your next Missing Maps partners call and see if anyone is actively thinking about what needs to be done for this?