WordPress.org

Make WordPress Core

Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#43914 closed enhancement (wontfix)

Include post revisions and auto-drafts in personal post data export

Reported by: desrosj Owned by:
Milestone: Priority: normal
Severity: normal Version:
Component: Privacy Keywords: gdpr 2nd-opinion
Focuses: Cc:

Description

Post revisions and auto drafts could contain personally identifiable information. Should these be included in a personal data export?

If so, these cannot be treated like other posts and listed in the export file, though. Without proper context, these are very confusing. Auto-drafts, for example, are always titled "Auto Draft", and even though they have a guid they are not accessible directly.

Change History (3)

This ticket was mentioned in Slack in #gdpr-compliance by desrosj. View the logs.


3 years ago

#2 @azaozz
3 years ago

  • Milestone 4.9.7 deleted
  • Resolution set to wontfix
  • Status changed from new to closed

No, they shouldn't. Auto-drafts are empty posts. There is no data in them. They are created just to have a post_id so the user can add categories and tags before saving the post for the first time.

Revisions are just post backups. They should be deleted or reassigned when anonymizing but there is nothing to export in them. Will just make everything extremely confusing.

Also, post data is not "exportable" personal information in the first place, unless proven otherwise. See #43809.

#3 @desrosj
3 years ago

  • Component changed from General to Privacy

Moving to the new Privacy component.

Note: See TracTickets for help on using tickets.