With regard to the GDPR compliance, I am in the US but my Admin Tools show many failed logins with IP addresses from EU. What is my responsibility to comply with GDPR. These are not customers or potential customers, they are likely hackers.
#29664 GDPR
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by on Saturday, 16 June 2018 17:17 CDT
Tuesday, 15 May 2018 09:44 CDT
aimlesslady
Wednesday, 16 May 2018 08:26 CDT
nicholas
Akeeba Staff
Manager
Disclaimer: we are not lawyers and the following does not constitute legal advice. This content is provided merely for informational purposes. If you are in doubt you should consult your lawyer.
With regards to the Admin Tools security exceptions log you do not have any obligations under the GDPR. Security and access logs, like those kept by your server or Admin Tools, are exempt from the provisions of the GDPR which require explicit consent to collect.
Another point I'd like to make is that the GDPR doesn't care about the relationship of the data subject (natural person) to your company or where they are located in. A French man living permanently in New York accidentally clicking on a link to your site has the same protection under the GDPR as a Germal citizen in Berlin who is your client. In other words, there's no technological way of knowing whether the GDPR applies to your visitors. Remember that before you start using gelocation to determine whether the GDPR applies to your visitor or for blocking EU visitors (a misguided practice I have already seen).
Later today I am going to publish a really long, really thorough article with how GDPR affects our relationship to our clients, our site and components installed on your sites.
With regards to the Admin Tools security exceptions log you do not have any obligations under the GDPR. Security and access logs, like those kept by your server or Admin Tools, are exempt from the provisions of the GDPR which require explicit consent to collect.
Another point I'd like to make is that the GDPR doesn't care about the relationship of the data subject (natural person) to your company or where they are located in. A French man living permanently in New York accidentally clicking on a link to your site has the same protection under the GDPR as a Germal citizen in Berlin who is your client. In other words, there's no technological way of knowing whether the GDPR applies to your visitors. Remember that before you start using gelocation to determine whether the GDPR applies to your visitor or for blocking EU visitors (a misguided practice I have already seen).
Later today I am going to publish a really long, really thorough article with how GDPR affects our relationship to our clients, our site and components installed on your sites.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Wednesday, 16 May 2018 09:47 CDT
aimlesslady
Thank you. I look forward to reading your article.
Saturday, 16 June 2018 17:17 CDT
System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.