Remove diff-feature for changed descriptions due to privacy concerns
tl;dr Please remove the diff-feature for changed descriptions, or allow to enable/disable it due to privacy reasons.
Issue descriptions and comments may contain personal data. For example if the ticket creator adds personal data to identify himself or if the issue was created automatically and includes data like an IP address.
To meet the requirements of the GDPR (https://en.wikipedia.org/wiki/General_Data_Protection_Regulation) in Europe it needs to be possible to remove such data.
It is possible to edit issue descriptions and comments. Whenever the issue description is changed Redmine automatically creates a diff with the previous version and appends it to the ticket. It is nit possible to remove this data. This means that any personal data, once included in description, will always remain in the ticket.
A suggested solution might be: Delete the issue. This however means that the ticket history is lost completly. Support & compliance however need this.
Since no diff is made for comments it might be as good to remove the diff feature for descriptions as well. Another solution would be to add an option which enables or disables the diff feature.
Updated by Dan Untenzu over 4 years ago
Example diff link: https://redmine.example.com/journals/1/diff?detail_id=1
Updated by Go MAEDA over 4 years ago
- Category set to Issues