SORMAS-Project icon indicating copy to clipboard operation
SORMAS-Project copied to clipboard

Update Data Protection for certain Data Fields [5]

Open Candice-Louw opened this issue 9 months ago • 2 comments

Problem Description

In order to be inline with data protection regulations in Luxembourg, certain data fields have to be updated. Some are applicable to SORMAS overall, while others are applicable only to Luxembourg (see details below).

Proposed Change

Tabs from the data dictionary:


Person


Current:

Field ID Field Type Data protection
Person.birthdateMM birthdateMM Number -

Proposed (for all servers and instances):

Field ID Field Type Data protection
Person.birthdateMM birthdateMM Number Personal

(Apply to all servers).


Location


Current:

Field ID Field Type Data protection
Location.city city Text personal

Proposed (only for Luxembourg instances):

Field ID Field Type Data protection
Location.city city Text -

(Apply removal of data protection restrictions for this field, but only if the server locale is set to Luxembourg)


Case


Current:

Field ID Field Type Data protection
CaseData.healthConditions healthConditions HealthConditions -
CaseData.postpartum postpartum YesNoUnknown -
CaseData.trimester trimester Trimester -

Proposed (for all servers and instances):

Field ID Field Type Data protection
CaseData.healthConditions healthConditions HealthConditions sensitive
CaseData.postpartum postpartum YesNoUnknown sensitive
CaseData.trimester trimester Trimester sensitive

(Apply to all servers).


Task


Current:

Field ID Field Type Data protection
Task.creatorComment creatorComment Text -
Task.assigneeReply assigneeReply Text -

Proposed (for all servers and instances):

Field ID Field Type Data protection
Task.creatorComment creatorComment Text - : Add GDPR notice (pop-up)
Task.assigneeReply assigneeReply Text - : Add GDPR notice (pop-up)

(Apply to all servers).


Event


Current:

Field ID Field Type Data protection
Event.srcFirstName scrFirstName Text -
Event.srcLastName scrLastName Text -
Event.srcTelNo scrTelNo Text -
Event.srcEmail scrEmail Text -

Proposed (for all servers and instances):

Field ID Field Type Data protection
Event.srcFirstName scrFirstName Text sensitive
Event.srcLastName scrLastName Text sensitive
Event.srcTelNo scrTelNo Text sensitive
Event.srcEmail scrEmail Text sensitive

(Apply to all servers).


Action


Current:

Field ID Field Type Data protection
Action.description description Text -

Proposed (for all servers and instances):

Field ID Field Type Data protection
Action.description description Text - : Add GDPR notice (pop-up)
Action.description Comments on execution Text - : Add GDPR notice (pop-up)

(Apply to all servers).


Added Value/Benefit

Enhanced data protection and compliance.

Acceptance Criteria

  • [ ] All fields (listed above) have new data protection attributes applied.

Implementation Details

No response

Mockups

No response

Additional Information

No response

Candice-Louw avatar Apr 30 '24 15:04 Candice-Louw