Questions tagged [gdpr]
General Data Protection Regulation (GDPR), EU regulation 2016/679
14
questions
0
votes
1
answer
161
views
How should a US based server avoid GDPR? [closed]
The last time I built a serious website was back in the early 90s. Web construction back then was straightforward -- build the site and publish for the world to access.
Today's web technology has ...
- 11
1
vote
1
answer
47
views
Providing total user anonymity in an Azure web application
For a potential project, we are tasked with developing a website (API/SPA principle) which has a paramount requirement of keeping personally identifiable information (PII) about its visitors anonymous,...
- 261
4
votes
1
answer
2k
views
Configuring NGINX for GDPR (= RGPD, DSGVO) compliance using anonymized IPs on older log files
The European General Data Protection Regulation Law (GDPR) aims to protect end users privacy. Among many other consequences, system administrators are therefore obliged to configure their systems in a ...
- 183
-1
votes
1
answer
74
views
MySQL 5.7 and GDPR [closed]
Hella !
I know how GDPR requires me to hide all personal data and make it impossible to get a match on any living person with any combination of the tables records. But any of you have experience ...
- 1,016
1
vote
0
answers
14
views
Emails from my server are considered as spam on hotmail [duplicate]
Well all is in the title. How to be removed from their spam list? We don't use external email provider for now. We respect emails good practices: signed email, unsubscribe link, dest email...
Here ...
- 111
28
votes
6
answers
11k
views
Have a system that expires SSH keys every 90th day [closed]
I have a customer that now requires us to change every password every 90th day due to their interpretation of GDPR. That's fine for the web-based system we develop for them because we can just ...
- 280
1
vote
1
answer
532
views
How to delete all information belonging to an ejabberd vhost?
Deactivating an ejabberd vhost is easy. In the simplest case, just remove the entry from the hosts section in /etc/ejabberd/ejabberd.yml.
I presume this does not delete any information about the ...
- 133
6
votes
1
answer
5k
views
How to create a GDPR compliant HTTP server access log with focus on remote IP anonymization and nginx?
EU's General Data Protection Regulation (GDPR), and the German DSGVO implementation, are very strict when it comes to individual-related data (such as IP addresses). However this question is not about ...
- 2,036
2
votes
0
answers
1k
views
How to prevent the client IP adress from being written to nginx error log
I can use log_format to remove the client IP from being written to the nginx access log. However, the error log always seems to include the client IP:
2018/05/18 15:43:55 [crit] 1234#1234: *1014 ...
- 21
2
votes
1
answer
2k
views
How to setup logrotate with GPG to encrypt for GDPR?
As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my ...
2
votes
0
answers
747
views
NGINX: Map IP to ASN
in Preparation for GDPR I want my NGINX to not log IP's any longer, but log the AS Number.
To map the ip to an AS number, I would use the BGP datasets from Ripe, and import them in an MySQL table.
...
- 41
11
votes
1
answer
810
views
Can you help me with my GDPR issue?
This is a Canonical Question about interpreting the GDPR as discussed on meta.
While Server Fault may help you when you have a specific problem on implementing something related to the regulation, ...
- 45.1k
7
votes
2
answers
9k
views
Is it still allowed to have log files under the new GDPR? [closed]
Is it still allowed to have server access log files under the new GDPR?
Because of the gathering of IP addresses is not allowed, I can imagine that system operators are in violation of the law in ...
- 622
0
votes
1
answer
628
views
How to make grafana GDPR compliant
Running Grafana v5.0.0-beta1
Grafana collects stats on user logins to grafana projects.
EU GDPR legistation (from May 25th 2018) has strict regulation concerning PII (personal identifiable ...
- 21