It’s one of the GDPR requirements in Europe - the ToS acceptance must be an explicit act (like marking a checkbox), not an effect of a separate action (like pressing the sign up). Is it possible with the SSO?

You can add a mandatory checkbox to the sign-up form. [07%20PM] [56%20PM]

[画像] RGJ: No - it just says that the text next to the checkbox should be clear and specific. Ok I was just showing an example of adding a checkbox to the signup form. Some standard wording will probably become common that everyone can use.

So, Is the check box next to the sign up compliant? I feel like it should be as long as the tos are clearly accessible from sign up. Especially in the case of a private users only install. But I’m trying to just cover bases and be compliant. Is it a wording issue with the sign up check box, or an i…

I read the enitire article and I understand the law conceptually but I don’t understand how it relates to (my) deployment of Discourse and how to comply.

[画像] usulrasolas: Is it a wording issue with the sign up check box, or an issue that it must be separate? Both. You need this: I agree to the terms of service (link) I agree to the fact that my data X and Y is going to be used for Z

I can handle that. Now to embed a link in the box. Sounds easy, hope it is.

[画像] tophee: circumvented with mass generated invite tokens. Well, if you’re using mass generated invite tokens, you’ll already need to posess the email address of the user-to-be, so you’ll already have their consent. The same goes for SSO scenario’s: consent should have been given prior to t…

The problem is not whether you have their consent or not but whether you can prove it. Having someone’s email surely doesn’t prove anything. (Besides, the magic with the mass generated invite tokens is precisely that you don’t need people’s email addresses.)

[画像] tophee: whether you can prove it Waiting for GDPR interpretation where you need call a GDPR officer to your house who signs off on your “for real” consent complete with a digital footage.

This onerous EU legislation is a real headache to understand. I’d really appreciate if Discourse could have a “GDPR compliance” checkbox that would enable the necessary features (read: usability pain). The cookie law was bad enough - but at least there’s no real teeth to it. With GDPR, on the othe…

利用者が利用規約に明示的に同意する方法

サポート

tophee (Christoph) 2018 年 3 月 21 日午後 11:27 15

A rare scenario, but worth mentioning: beware that this can be circumvented with mass generated invite tokens. Ordinary invites do honour required custom user fields.

I wonder if this could become a site setting to make life easier for European site owners?

トピック		返信	表示
GDPR and anonymizing personal data Community Building gdpr , privacy	75	19629	2018 年 12 月 1 日
Cookie compliance under GDPR Community Building gdpr	63	12201	2023 年 5 月 5 日
GDPR countdown and compliance Community Building gdpr	90	15223	2018 年 6 月 19 日
Providing data for GDPR Community Building gdpr , privacy	81	12911	2018 年 12 月 20 日
Cookie Consent, GDPR, and Discourse Site Management explanation	1	3795	2025 年 10 月 10 日

利用者が利用規約に明示的に同意する方法

関連トピック