Questions tagged [gdpr]

General Data Protection Regulation (GDPR), EU regulation 2016/679

Filter by
Sorted by
Tagged with
3
votes
1answer
393 views

Configuring NGINX for GDPR (= RGPD, DSGVO) compliance using anonymized IPs on older log files

The European General Data Protection Regulation Law (GDPR) aims to protect end users privacy. Among many other consequences, system administrators are therefore obliged to configure their systems in a ...
-1
votes
1answer
57 views

MySQL 5.7 and GDPR [closed]

Hella ! I know how GDPR requires me to hide all personal data and make it impossible to get a match on any living person with any combination of the tables records. But any of you have experience ...
1
vote
0answers
14 views

Emails from my server are considered as spam on hotmail [duplicate]

Well all is in the title. How to be removed from their spam list? We don't use external email provider for now. We respect emails good practices: signed email, unsubscribe link, dest email... Here ...
28
votes
6answers
6k views

Have a system that expires SSH keys every 90th day

I have a customer that now requires us to change every password every 90th day due to their interpretation of GDPR. That's fine for the web-based system we develop for them because we can just ...
0
votes
1answer
161 views

How to delete all information belonging to an ejabberd vhost?

Deactivating an ejabberd vhost is easy. In the simplest case, just remove the entry from the hosts section in /etc/ejabberd/ejabberd.yml. I presume this does not delete any information about the ...
5
votes
1answer
2k views

How to create a GDPR compliant HTTP server access log with focus on remote IP anonymization and nginx?

EU's General Data Protection Regulation (GDPR), and the German DSGVO implementation, are very strict when it comes to individual-related data (such as IP addresses). However this question is not about ...
2
votes
0answers
670 views

How to prevent the client IP adress from being written to nginx error log

I can use log_format to remove the client IP from being written to the nginx access log. However, the error log always seems to include the client IP: 2018/05/18 15:43:55 [crit] 1234#1234: *1014 ...
1
vote
1answer
1k views

How to setup logrotate with GPG to encrypt for GDPR?

As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my ...
1
vote
0answers
330 views

NGINX: Map IP to ASN

in Preparation for GDPR I want my NGINX to not log IP's any longer, but log the AS Number. To map the ip to an AS number, I would use the BGP datasets from Ripe, and import them in an MySQL table. ...
11
votes
1answer
664 views

Can you help me with my GDPR issue?

This is a Canonical Question about interpreting the GDPR as discussed on meta. While Server Fault may help you when you have a specific problem on implementing something related to the regulation, ...
7
votes
2answers
7k views

Is it still allowed to have log files under the new GDPR? [closed]

Is it still allowed to have server access log files under the new GDPR? Because of the gathering of IP addresses is not allowed, I can imagine that system operators are in violation of the law in ...
0
votes
1answer
298 views

How to make grafana GDPR compliant

Running Grafana v5.0.0-beta1 Grafana collects stats on user logins to grafana projects. EU GDPR legistation (from May 25th 2018) has strict regulation concerning PII (personal identifiable ...