Skip to content

Commit

Permalink
How to handle privacy providers that only store data in a sub-system
Browse files Browse the repository at this point in the history
It appears that this is not clear to everyone who reads the documentation at the moment that a plugin that sends data to a subsystem, for example the logs should not use the null_provider and that the sub-system will do the retrieval and deletion of the personal data.
  • Loading branch information
NeillM authored Aug 23, 2024
1 parent 6847aa6 commit a88935d
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions versioned_docs/version-4.3/apis/subsystems/privacy/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -61,3 +61,9 @@ Any context-specific preference should:
The core_enrol subsystem just uses the enrol_xxx components to display the UI to manage the enrolments. The process as a whole is managed by core_enrol, and enrol_xxx are just a way of bringing two concepts together. The data is stored consistently within core_enrol and the enrol_xxx components are essentially a conduit to store the data en the core_enrol subsystem.

You can ultimately work out which enrol plugin a user is enrolled with, but the UI is largely provided by core_enrol, and the calling code is actually core_enrol. Besides, you don't create an enrolment plugin instance in isolation: core_enrol is central to the experience.

## My plugin does not store any personal data itself, but does send personal data into the Moodle logs or another subsystem. What should I do?

You need to implement *\core_privacy\local\metadata\provider* so that you can describe the sub-systems used by your plugin in *get_metadata*.

The exporting and deleting of the user data in the subsystem will be handled by that subsystem and the plugins inside it, so you do not need to implement any of the request interfaces which are used to export data from the plugin.

0 comments on commit a88935d

Please sign in to comment.