Browsing Chinese (Simplified) translation

7.

Starting in Mahara 18.04, Mahara includes a number of extra privacy-related features to support institutions to be compliant with the `GDPR <https://www.eugdpr.org/>`_ (General Data Protection Regulation), the new EU privacy regulation, effective 25 May 2018. It requires organizations to be stricter in protecting the personal privacy of EU residents.

8.

This does mean though that the software can cover all areas of compliance. Each institution will still need to provide a number of extra information as well as infrastructure to adhere to the GDPR. These include, but may not be limited to the following, depending on your use of personal data of the people who use your site:

9.

Up-to-date privacy statement and terms and conditions;

10.

Data protection officer and work flow for responding to inquiries;

11.

Internal documentation around data protection.

12.

Features in Mahara that cater to the GDPR compliance:

13.

Everyone can be required to consent to the terms and conditions and the privacy statement of the site: This is the :ref:`strict privacy mode <institution_settings>`.

14.

Currently, the strict privacy mode requires that it is not possible for people to be in multiple institutions.

15.

If an institution has additional terms and conditions or privacy regulations to which its members need to consent when using the site, they can be dealt with on the :ref:`institution level <institution_legal>` and members need to consent to them.

16.

Whenever changes are made to the legal statements (terms and conditions and privacy statement), everyone affected by them needs to consent to the changed statement(s) when they log into the site the next time.