2019-10-18 Reporting Data Privacy Working Group Meeting Notes

National Library of Hungary

Ingolf

The National Library of Hungary - go-live planned for end of 2020 - Will they install the FOLIO Reporting LDP at go-live and if so, will they need to do reports which contain personal data ? → Ingolf asks @Lendvay Miklós

organization vendors data

Ingolf

Vendors contact data (contact name, contact address, phone, email) are considered publicly available. In so far, GBV does not plan to do reporting on personal data. GBV/VZG will send a list of its top 5 reports to Nassib  (or to the Reporting SIG).

Ingolf asks Sven Markgraf if these are really not subject to GDPR compliance.

Fields to anonymize

This group

Organization contact data need to be anonymized before they flow into the LDP.

• mod-organizations-storage: Compile a list of personal data fields and send it to Nassib for exclusion from LDP; by Oct 18th See API documentation here: https://dev.folio.org/reference/api/#mod-organizations-storage

in-app vs. LDP reports

This group

Let's look at the question in-app vs. LDP reporting in a new way: The decision should be driven by functional requirements.

Let's go through Flagged FOLIO reports - privacy  (or RA Reports to cluster or both ?) again and decide from a functional perspective: Which of the reports which contain sensitive personal data should be made in-app, and which ones are really LDP reports ?