metacpan-api
metacpan-api copied to clipboard
metacpan
Link between CPAN authors and their Act conference participations
As discussed during the Perl Toolchain Summit.
The file http://conferences.mongueurs.net/pause-act-conferences.json contains a list of authors (self-declared in Act) and conferences (only Act conferences hosted on the main instance). It links authors with the conference they attended or spoke at using the Act conf_id.
@oalders not that I remember. I was talking with @mickeyn and @haarg about the format, and they basically said "anything sensible is good".
Publishing this compilation, is it in compliance with GDPR? This file is a compilation of publicly available data. When I create an account in Act, it is not said that the data may be compiled and made publicly available outside of the conference. How will be handled the requests to be removed from this compilation, without being removed from the conferences?
@elbehopro This is a very good point, which I completely overlooked when I answered "it's already public data, so we're probably fine" when the MetaCPAN team asked if we could actually share this.
I think the best option at this point would be to add an opt-in checkbox to "Share your public data (as shown in your profile) with other non-commercial Perl-related services (e.g. MetaCPAN)".
Thank you Laurent for having relayed here my remark concerning the publication without consent. The fact that the data exists and is collected does not give permission for it to be compiled and publicly displayed. I'm in favor of a consent checkbox, active opt-in.
- Publicly available for this conf only
- Publicly available for all conferences
- Publicly available for all conf and ok for sharing data
All unchecked by default.
Btw we could ask ourself the relevance of keeping publicly available information about visitors after a conference.
... and we should continue all this in the Act repository :)
Lately, I've been discussing things related to ACT and how we (re-)use and share data with a GDPR knowledgeable person...
Compiling a list and making it publicly available is most likely a violation, as you are compiling a profile. The fact that data is publicly available for historical reasons (one can visit the web pages from the past) does not give you any permission to collect it and make it available in a condensed format.
