Database export improvements about worldcubeassociation.org HOT 13 CLOSED

The link to my ideas goes to a blank page saying There is no group named “wca-software.

from worldcubeassociation.org.

Ah, shoot, we renamed the group from wca-software to wca-software-public. I've updated the original link to reflect this.

from worldcubeassociation.org.

The first bullet point I've ticked as that's been taken care of. Will close this issue unless people feel the other points are still relevant.

from worldcubeassociation.org.

1. We worked around the db export slowness by getting rid of the human element. Instead, the db export is generated in a cron job that just gets slower every week, and we don't really notice it. We'll probably need to revisit that someday, but 🤷‍♂️ on when we should do that.
2. I don't feel it's our job to work around limitations in excel.
3. I think we should eventually semver our public export. CC-ing @lgarron because we've talked about this recently.

I don't think it's worth tracking 1) or 2). It might be worth creating a new issue to discuss 3).

from worldcubeassociation.org.

Is this still relevant?

from worldcubeassociation.org.

Chiming in from a DPO perspective on 3). For the right to be forgotten, its is WCA's duty to request the data removal from known data processors. We typically just write-off the public database export as unknown data processors to where would could not reasonably seek out and remove the PII from everyone that's downloaded the export. Tracking downloads would very much help this if we wanted to include that on our radar, which is probably a good idea.

from worldcubeassociation.org.

We typically just write-off the public database export as unknown data processors to where would could not reasonably seek out and remove the PII from everyone that's downloaded the export.

I definitely agree that (even if we had perfect download tracking) chasing everybody who ever downloaded the export is not at all reasonable or feasible. What would be the advantage in implementing tracking, which you said "is probably a good idea"?

from worldcubeassociation.org.

We typically just write-off the public database export as unknown data processors to where would could not reasonably seek out and remove the PII from everyone that's downloaded the export.

I definitely agree that (even if we had perfect download tracking) chasing everybody who ever downloaded the export is not at all reasonable or feasible. What would be the advantage in implementing tracking, which you said "is probably a good idea"?

It’s a good idea, if we wanted to pursue those data processors for deletion of personal data. But I’m not even sure that’s something we would want to do.

from worldcubeassociation.org.

I'm not even sure it's something that we could do even if we desparately wanted.
How would that look like in practice, anyways? Send a mail to everybody who ever downloaded the export, have them open the SQL file and delete a few statements?

from worldcubeassociation.org.

I'm not even sure it's something that we could do even if we desparately wanted.
How would that look like in practice, anyways? Send a mail to everybody who ever downloaded the export, have them open the SQL file and delete a few statements?

Ya or my thought would be, anytime we make an update like that, have soemthing trigger to send an email asking everyone to deleting the old database export and download a new one, but again probably not worth it considering the very large number of people who have access to the export

from worldcubeassociation.org.

And also considering that just sending an email is not very... binding?
Sorry, missing a good English word here, what I intend to say is that emails are easy to consciously ignore (or even unconsciously forget)

from worldcubeassociation.org.

Right, the specific wording in GDPR iirc is: “inform known data processors”, so it doesn’t matter if the data processor does what we ask them to do or not, but if we were to even get into any legal trouble for someone saying our data processors didn’t remove their data, we’d have the emails to prove it.

Anyways like to say currently the people that download the database are unknown, so we don’t/can’t inform them to remove affect data.

from worldcubeassociation.org.

It looks like the database export hasn't run since April 11th, 2023. Is this a known problem?

from worldcubeassociation.org.