Core Privacy Roadmap
- User participation and rights: give people rights to access, control, and delete their data
- Accountability, enforcement, and redress: Provide a means to correct errors and right wrongs
- Choice, control, and consent: Give people choices and options over the use of their data at any time
- Special categories of sensitive personal data: taking extra care with data which could result in personal risks to the subjects
Over the past years, CMS projects have taken a new focus on online privacy, largely spurred by compliance requirements for Europe’s General Data Protection Regulation. Although that work is now largely completed, the work gave each project useful practical experience in
- creating privacy teams
- planning and structuring work on a volunteer-led basis
- advocating for the inclusion of the privacy work within release schedules.
The compliance work also led each project to understand that privacy is about taking a proactive approach, and deploying the concepts of privacy by design and other best practices as integrated standards throughout CMS projects, and is not merely about coding reactive fixes related to specific legal requirements.
The open source community can help shape the online community into one that values the user’s data and privacy through a positive and proactive approach to building guidelines, policies, and tools, rather than a negative and responsive approach to compliance as a legal obligation.
In order to build the community necessary to take on this task, it is proposed that each project would nominate a handful of representatives to meet on a regular basis and to work to implement the guidelines and outcomes from the group into their project. By synchronizing efforts and sharing tooling across common code libraries, a broader basis for security and privacy focused features can be created in the open source community.
At the heart of this is the belief that privacy is about protecting and empowering users by safeguarding their data and giving them rights over it.
Drupal, Joomla, and WordPress have a combined market share of 71% as of December 2018. The potential of this group to make a meaningful difference in online privacy for 71% of the web is tremendous.