Propose new functionalities for Decidim software
#DecidimRoadmap Designing Decidim together
When the user account is removed, the authorization metadata is still kept in the database which can store user's personal data.
I very well understand the reason for this as otherwise users could possibly cast an unlimited amount of votes e.g. in participatory budgeting.
However, the problem is that the GDPR's right to be forgotten is not complied with this approach.
I don't know exactly how to solve this correctly to serve these requirements:
- Make sure that the user does not cast duplicate votes (with the authorization's "unique_id")
- The authorization metadata is available for validating the votes in case there is some investigation required for the validity of the voting result
- The user's personal data would be cleared after some period of time when the voting has already ended
Possibly after the voting has ended, the voting could be somehow permanently "validated" and locked which would count the results and make it impossible to cast any further votes, even if voting would be re-enabled for the component (cannot vote after voting results have been validated). Then, after this validation, the authorization metadata could be destroyed for the deleted user accounts if they don't have any more votes in components where the voting is still ongoing.
Report inappropriate content
Is this content inappropriate?
Comment details
You are seeing a single comment
You can check the rest of the comments here.
Conversation with Antti Hukkanen
This is what we are already doing through the "unique ID" of the authorization. This is controlled by the authorization method itself which knows about its metadata and can generate the "unique ID" based on that.
However, the other personal data could be still needed for validating the voting result, even after the user account has been deleted. The unique ID itself is not sufficient for validating the result.
You mean an "offline" validation? Yes you're right. Probably different legal frameworks affects too, for instance about how long the data has to be kept in order to be reviewed.
Yes, I mean manual offline validation. Similar to validating the voter lists of a presidential election (list of all the people eligible for the vote and then check that all voters are in that list).
In different situation this validation may e.g. require to check the official home city of the person or their age. Technical systems can always fail with these validations due to bugs, so the availability of this data is important recording the official validation for the voting. This also adds more credibility to the voting process.
In case the metadata was cleared with the user account, this could not be done.
This indeed is complex and should be discussed seriously by the association.
Loading comments ...