HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Options
Export User Data SQL - GDPR
HIAviator
New
I have a user requesting his personal data from my forums. Does anyone have SQL to do this yet?
0
Comments
@HIAviator: If he just wants the user data you can simply send him the field values you find in his dashboard user page.
But I guess the user wants a data dump of all his discussions and comments or?
I'm not entirely clear on what GDPR requires in this regard. I guess it's user data and discussions, comments etc?
I doubt very much if GPDR requires you to provide them with a list of comments/discussions.
I would say that was is held in the USER table would be all that could be reasonably expected.
Have a look at the GPDR thread for Linc's view on this.
If that's the case it will be simple. Thanks!
There is very little in the user table that isn't already public information and also personally identifying. It is mostly the email. You can provide the name and gender also there are IP related fields. Note the password is hashed. You don't want to provide that as it would compromise them and possibly other users. They are free to change it.
Unless of course you re using specific Addons which collect more data. You might also what to check the UserMeta table and you can query with he UserID.
GPDR has complicated what used to be very clear data protection legislation with possible prison sentence and conflated it it with privacy legislation which is different thing.
grep is your friend.
Am I required to send the user their post history as well?
I don't believe so.
It would be hard to argue posts were personal information.