[GDPR] Right to Access

[rodrigok]

Description

Part of the expanded rights of data subjects outlined by the GDPR is the right for data subjects to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed, where and for what purpose. Further, the controller shall provide a copy of the personal data, free of charge, in an electronic fromat. This change is a dramatic shift to data transparency and empowerment of data subjects.

Comment

Maybe a web page for registered users to download their content stored in the database. Check the Facebook feature for ideas, they have solved it in a nice way I think.

Solution (draft)

• Admin option to enable it
• Profile button to start the process
• Method to loop all the user's subscriptions and create a file per room containing the conversation (all messages or user's messages only?) in human readable format
  • Get all the attachments too
• Notify via email with a link to download the zip containing the files
  • Store inside mongodb???
• Only allow the user to carry out the process once per day

Effort

• 32h of work