Project

General

Profile

Actions

Defect #30713

open

Remove diff-feature for changed descriptions due to privacy concerns

Added by Dan Untenzu about 5 years ago. Updated about 5 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Issues
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Affected version:

Description

tl;dr Please remove the diff-feature for changed descriptions, or allow to enable/disable it due to privacy reasons.

Situation:

Issue descriptions and comments may contain personal data. For example if the ticket creator adds personal data to identify himself or if the issue was created automatically and includes data like an IP address.

To meet the requirements of the GDPR (https://en.wikipedia.org/wiki/General_Data_Protection_Regulation) in Europe it needs to be possible to remove such data.

It is possible to edit issue descriptions and comments. Whenever the issue description is changed Redmine automatically creates a diff with the previous version and appends it to the ticket. It is nit possible to remove this data. This means that any personal data, once included in description, will always remain in the ticket.

A suggested solution might be: Delete the issue. This however means that the ticket history is lost completly. Support & compliance however need this.

Since no diff is made for comments it might be as good to remove the diff feature for descriptions as well. Another solution would be to add an option which enables or disables the diff feature.

~dan


Files

Actions

Also available in: Atom PDF