Browsing English (United Kingdom) translation

4.

It is the responsibility of each institution to check what it needs to do to be compliant with the privacy laws in its jurisdiction.

5.

**Disclaimer**: The information provided here does not constitute legal advice but is provided for information purposes only. If you need legal advice, please consult your own lawyer.

6.

GDPR compliance

7.

Starting in Mahara 18.04, Mahara includes a number of extra privacy-related features to support institutions to be compliant with the `GDPR <https://www.eugdpr.org/>`_ (General Data Protection Regulation), the new EU privacy regulation, effective 25 May 2018. It requires organizations to be stricter in protecting the personal privacy of EU residents.

8.

This does mean though that the software can cover all areas of compliance. Each institution will still need to provide a number of extra information as well as infrastructure to adhere to the GDPR. These include, but may not be limited to the following, depending on your use of personal data of the people who use your site:

9.

Up-to-date privacy statement and terms and conditions;

10.

Data protection officer and work flow for responding to inquiries;

11.

Internal documentation around data protection.

12.

Features in Mahara that cate to the GDPR compliance:

13.

Everyone can be required to consent to the terms and conditions and the privacy statement of the site: This is the :ref:`strict privacy mode <institution_settings>`.