#43914 closed enhancement (wontfix)
Include post revisions and auto-drafts in personal post data export
| Reported by: |
|
Owned by: | |
|---|---|---|---|
| Milestone: | Priority: | normal | |
| Severity: | normal | Version: | |
| Component: | Privacy | Keywords: | gdpr 2nd-opinion |
| Focuses: | Cc: |
Description
Post revisions and auto drafts could contain personally identifiable information. Should these be included in a personal data export?
If so, these cannot be treated like other posts and listed in the export file, though. Without proper context, these are very confusing. Auto-drafts, for example, are always titled "Auto Draft", and even though they have a guid they are not accessible directly.
Change History (3)
Note: See
TracTickets for help on using
tickets.
No, they shouldn't. Auto-drafts are empty posts. There is no data in them. They are created just to have a post_id so the user can add categories and tags before saving the post for the first time.
Revisions are just post backups. They should be deleted or reassigned when anonymizing but there is nothing to export in them. Will just make everything extremely confusing.
Also, post data is not "exportable" personal information in the first place, unless proven otherwise. See #43809.