Personal data reports do not include image attachment metadata

[joanne123]

Image attachments may sometimes have associated data containing quite a lot of personal information.
The personal data report shows a link only to the image itself. Would it not be more useful to show a link to the attachment page?

[allendav]

@joanne123 - can you give an example of personal data core saves in attachment meta? or are you thinking of particular plugins?

[joanne123]

I'm thinking that if the image itself is to be recorded as being possibly personal data (and the new personal data export function does seem to do this), then so should any title, caption or description associated with it.

[desrosj]

Thanks for the ticket, @joanne123. And welcome to Trac!

This falls under the same discussion as posts. There is no way to judge which post content or post title contain personal data. Same is true for attachment descriptions and captions. I am not sure that including all metadata is appropriate (camera details, for example), but including titles, descriptions and captions is reasonable.

[desrosj]

Looking at this again, I think I actually misspoke in ticket#44239:comment#4. User post data is not included in data exports by default currently in core.

I am going to close this out as maybelater. I think that until personal data stored in attachment metadata can be identified, this can be solved with a plugin.