On Feb 19, 2018, at 7:38 PM, Tom <tom(a)hutch4.us> wrote: Thanks Victoria My main concern and this should include any wiki admin with an open registration on their wiki, is there any available information on the technical side? I found a few tasks on phabricator but nothing specific for handling explicit consent of users nor any tools for wiki admins using the MediaWiki software to assist them with compliance of GDPR. There are many open source projects scrambling to improve user registration and user account tools making sure websites run by their software is ready for GDPR. Yes, a few things can be handled with extensions, but at best they would be patch and make compliance difficult. Tom _______________________________________________ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Thanks Tom for bringing up the issue to the list and thanks Victoria for noting the WMF is already in the process of tackling this presumably rather complex issue. I do not envy you for this task. From what I have heard, I may be wrong here, any "solution" no matter what it looks like, should be in place by End of May this year. This would leave us with another three months which sounds more like a sprint effort. Moreover this "solution" should also cater for not just WMF but third party users too, i.e. users of MediaWiki 1.27, at least this would be my wish at this point. I guess it will be great if at one point the resprective Phabricator tasks could be shared over this list and if it is only for allowing people to follow the discussion and stay in the loop. I am sure that there are other people on this list who are interested in this topic too and also have the problem of trying to be somewhat compliant with regulations. Cheers Karsten Am 20.02.2018 um 04:55 schrieb Victoria Coleman: compliance. We are planning a cross Departmental program as part of annual plan which will include all the necessary work - so Phabricator has not been populated yet. This is a great time for input like this so I encourage you to discuss it with John and Tony. Thanks Tom! registration on their wiki, is there any available information on the technical side? explicit consent of users nor any tools for wiki admins using the MediaWiki software to assist them with compliance of GDPR. There are many open source projects scrambling to improve user registration and user account tools making sure websites run by their software is ready for GDPR. would be patch and make compliance difficult. wrote: General Counsel, are leading our work on GDPR compliance. It is a significant priority for both Tech and the Legal departments at the WMF. (General Data Protection Regulation) being enforced as of 28 May 2018? EU deems personally identifiable information of EU residents such as usernames, real names, email addresses, etc. A method to prove consent such as a checkbox for Terms of Service and the date consent was given. those outside the EU) who store data on someone living in the EU. _______________________________________________ MediaWiki-l mailing list To unsubscribe, go to: https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

On May 16, 2018 at 1:00:13 PM, Greg Rundlett (freephile) ( greg(a)freephile.com) wrote: Bump. Is anything happening at WMF to assist corporate compliance directors and site administrators, who run MediaWiki, in their obligations with respect to GDPR? May 25th is right around the corner. Projects like Drupal, CiviCRM, Discourse, Platform.sh; plus every major software vendor and social website is announcing their compliance with GDPR and/or has a publicly visible project and discussion about compliance. I can't find any information regarding GDPR compliance with regards to websites powered by MediaWiki. The 'Scrum of Scrums' message from today does not mention GDPR. I did find information about how Wikimedia Sweden is tackling the issue. [1] [1] https://se.wikimedia.org/wiki/Kategori:GDPR Part of the draft Wikimedia Foundation annual plan for this coming fiscal year (starting July 1) includes work on GDPR compliance: < https://www.mediawiki.org/wiki/Wikimedia_Technology/ Annual_Plans/FY2019/CDP1:_Privacy,_Security,_and_Data_Management>. Full disclosure, I am not involved in this program, but have some familiarity with the Foundation’s efforts toward privacy and security. Technically speaking the final plan hasn’t been approved yet (that’s up to the board) but I think what will end up being approved will be materially similar to this current draft. Cheers, James Hare

Moreover they regrettably do not specifiy a license so this one may be assumed a copyrighted extension. *Any* extension developed for MediaWiki and "distributed" (as is the case