# GDPR countdown and compliance **URL:** https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190 **Category:** Community Building **Tags:** gdpr **Created:** [May 10, 2018, 7:08pm UTC](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190 "2018-05-10T19:08:03Z") **Posts on this page:** 1 **Showing post:** 77
### Author: ![GBrowning](https://avatars.discourse-cdn.com/v4/letter/g/f17d59/32.png) [@GBrowning](https://meta.discourse.org/u/GBrowning) #### Post date: [May 25, 2018, 10:57am UTC](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190/77 "2018-05-25T10:57:43Z")
So, to clarify the current status for compliance regarding the issues I raised in the first post: ## Consent to Updated Privacy Policy / Terms of Service ✅ We can use @angus’s amazing custom wizard to construct a consent to new privacy policy and ToS (which can state that emails are used to “notify you about posts and other activity on the forum”): [https://meta.discourse.org/t/custom-wizard-plugin/73345/111](https://meta.discourse.org/t/custom-wizard-plugin/73345/111) ## IP Addresses ⌛ ✅ Sounds like a ton of work was done with regards to IP addresses and will be part of an upcoming 2.0 or 2.1 build so we’re almost there: > [@Problematic IP address fields](https://meta.discourse.org/t/problematic-ip-address-fields/83785): > > Continuing the discussion from [Providing data for GDPR](https://meta.discourse.org/t/providing-data-for-gdpr/83595/17): I did a first pass over Discourse’s tables, and I found several places where IP addresses are being accidentally correlated with user IDs. This is toxic data generating liability for Discourse forums. List of problematic IP address fields: white_check_mark x incoming\_links: stores timestamped IP address correlated with user ID and an exact post ID, topic ID, and Referer: header Fixed Storage: PR#5826white_check_mark … ## Data Portability ✅ We can use @angus’s Legal Tools Plugin to allow users to download _all_ collected data about themselves. > [@Legal Tools Plugin](https://meta.discourse.org/t/legal-tools-plugin/87966): > > Repository: [GitHub - paviliondev/discourse-legal-tools: Tools to help with legal compliance when using Discourse · GitHub](https://github.com/paviliondev/discourse-legal-tools) This plugin provides tools to assist with legal compliance when running a Discourse forum. Tools will be added on an ongoing basis. Please note the disclaimer below. This plugin provides no guarantee of legal compliance. Extended User Download The extended user download is a single CSV with the following entries, each separated by two blank lines: A header (can be edit… And perhaps some of this work can go into the normal Download button handler after the IP addresses issue is fully resolved. Great job everyone! 👏 👏 👏 --- _[View the full topic](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190)._