It’s one of the GDPR requirements in Europe - the ToS acceptance must be an explicit act (like marking a checkbox), not an effect of a separate action (like pressing the sign up). Is it possible with the SSO?

You can add a mandatory checkbox to the sign-up form. [07%20PM] [56%20PM]

Would you be compliant with the GDRP requirements if users agreed to your forum’s ToS on the SSO Provider site? If so, it would be fairly easy to build it into your SSO provider code.

I’m also a fan of this behavior. Some sites do this by “pinned banner” type notices that must be accepted to clear. I do not have an sso provider to that wouldn’t be an option for me but I agree should work with several sso provider

That’s a decent solution! I’ll use something like “I have read and agree to the terms of service” If the whole install is login only, I will have to use an alternate hosted tos and privacy policy for the links on signup page yes?

[图片] usulrasolas: Some sites do this by “pinned banner” type notices that must be accepted to clear. You’re too late then, you’ll already have stored information at that point. Just having an ‘I accept the TOS’ is not enough for the GDPR though. This is a good read. Some highlights: Expl…

So they have to write some words into a text field like “I consent to blah blah” and then tick a checkbox? Also… oral statement… like at a notary public… for a website? wow.

I don’t know about that interpretation of that being exactly right. A couple sites I use with a million plus users have been recently overhauled for gdpr compliance and once uses a banner and the other it a tick box on a captive tos page before you sign up. I’m not a lawyer tho

[图片] neil: So they have to write some words into a text field like “I consent to blah blah” and then tick a checkbox? No - it just says that the text next to the checkbox should be clear and specific. So ‘I understand and agree that this website is going to use my name and e-mail address in o…

[图片] RGJ: No - it just says that the text next to the checkbox should be clear and specific. Ok I was just showing an example of adding a checkbox to the signup form. Some standard wording will probably become common that everyone can use.

So, Is the check box next to the sign up compliant? I feel like it should be as long as the tos are clearly accessible from sign up. Especially in the case of a private users only install. But I’m trying to just cover bases and be compliant. Is it a wording issue with the sign up check box, or an i…

I read the enitire article and I understand the law conceptually but I don’t understand how it relates to (my) deployment of Discourse and how to comply.

如何让用户明确同意服务条款

支持

neil (Neil Lalonde) 2018 年3 月 21 日 18:37 4

You can add a mandatory checkbox to the sign-up form.

33 个赞

GDPR countdown and compliance

Discourse: Google Play user-generated content policy violation

Site_setting.tos_url doesn't work

话题		回复	浏览量
GDPR and anonymizing personal data Community Building gdpr , privacy	75	19627	2018 年12 月 1 日
Cookie compliance under GDPR Community Building gdpr	63	12194	2023 年5 月 5 日
GDPR countdown and compliance Community Building gdpr	90	15223	2018 年6 月 19 日
Providing data for GDPR Community Building gdpr , privacy	81	12909	2018 年12 月 20 日
Cookie Consent, GDPR, and Discourse Site Management explanation	1	3789	2025 年10 月 10 日

如何让用户明确同意服务条款

相关话题