Presentation about how TYPO3 can help you support to comply with the GDPR/DSGVO

1. TYPO3 & DSGVO
TYPO3 & GDPR
T3DD18, Düsseldorf

2. Content
➔ Status: TYPO3 Core
➔ What is missing?
➔ Discussion: Next steps
➔ (GDPR-Extension)

3. TYPO3 Core
Ready for GDPR?

4. Cookies in Core
- FE-Login only after
login or using sessions
- Backend-Login
- Install Tool

5. IP addresses within core
- sys_log
- indexed_search_stat

6. IP address anonymization
API
TYPO3CMSCoreUtilityIpAnonymizationUtility
::anonymizeIp(string $address, int $mask)
Default mask
$GLOBALS['TYPO3_CONF_VARS']['SYS']['ipAnonymization']

7. IP address in EXT:indexed_search

8. IP address anonymization & CLI
$GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['scheduler']
['tasks'][TYPO3CMSSchedulerTaskIpAnonymizationTask::c
lass]
['options']['tables']['index_stat_search'] = [
'dateField' => 'tstamp',
'ipField' => 'IP'
];

9. Cleanup DB-Tables

10. Access
- BE-User & Usergroups
- Access to only those fields which
are relevant
- Admin user

11. Embedding YouTube
Usage of youtube-nocookie.com
<f:media
file="{file}"
additionalConfig="{
'no-cookie': true
}" />

12. Discussion
What is missing?

13. More IP addresses in core
https://forge.typo3.org/issues/85316

14. Personal data portability
Access/Download to all data related to a person:
- Account information
- Orders
- Created content including relations, assets, ...

15. “Forget me”
Removal of all data related to a person:
- Account information
- Orders
- Created content including relations,
assets, ...

16. Randomization
- Removal of privacy related data
- Keeping other information
- Relations
- Statistics

17. Cookie API
- Let users deny cookie
usage
https://forge.typo3.org/issues/85051

18. 2 click solution for 3rd party code
Ask user for consent before embedding 3rd party code
- Youtube, Vimeo & friends
- Google Maps
- Google Fonts
- ...

19. What about forms?
What can the core do for you?
- Some kind of overviews?
- Checks?

20. Discussion
What else is missing?

21. EXT:gdpr
gdpr.extension.support

22. Working with
privacy related
data
- Soft delete
- Hide for Admins & Editors
in BE & FE
- Custom module for further
progressing

23. Questions & Answers