Shutting Down Forum (GDPR)

[bradrydzewski]

Dear Drone Community,

Drone has begun receiving formal GDPR compliance requests. As an open source project I do not have the time or resources to process these requests, nor am I willing to pay for legal counsel out-of-pocket to advise on such matters and draft formal policy documentation.

I have therefore decided to shutdown this forum effective July 1 and have disabled new account creation effective immediately. We will transition this mailing list to /r/droneci which is better equipped to ensure ongoing compliance with data privacy regulations. Please understand that I am not making a political statement for or against GDPR. I simply believe this is the easiest, most cost-effective path toward compliance.

Please note that we will continue to offer Enterprise Support via our Slack channel.

[bradrydzewski]

[gboddin]

@bradrydzewski I believe they detail everything to do to be compliant here https://www.discoursehosting.com/your-discourse-forum-and-the-gdpr/ no ? (using a search/replaced version of https://meta.discourse.org/privacy for tos) ?

But trust me … I understand the administrative nightmare …

[bradrydzewski]

I do appreciate the links. The gdpr documentation is quite long and I lack the domain expertise to read and comprehend the document in full. Perhaps this is cultural, since the United States is a very litigious society, but I would not feel comfortable accepting liability for gdpr compliance without consulting an attorney. It is also unclear how I am expected to respond to DPA execution requests (what the hell is a DPA request?), which I have already received, and what penalties I could face if I fail to provide a sufficient response. Overall, it just seems like outsourcing to StackOverflow or Google Groups makes more sense. This way I can focus my time on making Drone better, as opposed to becoming a legal expert

[laszlocph]

The sad part is losing this knowledgebase completely.

Github issues have links to the old forum, then there was the Gitter period, and now losing this forum. Doesn’t send a good message

[bradrydzewski]

The knowledge base can be archived, and Stack Overflow will still provide an avenue to share knowledge and receive support from volunteers. The great thing about Stack Overflow is that there is no administration required, and ownership and administration is much more decentralized. Stack Overflow also supports a feature called Stack Overflow Documentation to which the current knowledge base may be transferred.

[gboddin]

Clicks on documentation

We have shut down
Stack Overflow Documentation.

Documentation was our attempt at improving existing reference materials by focusing on examples. The beta ran from July 21st, 2016 until August 8th, 2017. For more details on why we ended it, please see our post on meta. Thank you to everyone that participated. As always, the content contributed by our community is available under CC-BY-SA: download the archive.

@bradrydzewski maybe just transfer ownership ^^

[bradrydzewski]

Unfortunately I am told I may not permitted to transfer ownership. The Discourse software collects some personally identifiable and sensitive data (username, email, IP and github token for oauth login) and I do not have authorization to transfer ownership of this data to a third party. Such a transfer could be considered a violation of GDPR without having consent.

[ogarcia]

Why not do a Subreddit? It works like discourse and can have moderators.

[cedk]

I may not permitted to transfer ownership

But maybe you may “delegate” the operational to a “sub-contractor” who will take the responsibilities.

[bradrydzewski]

But maybe you may “delegate” the operational to a “sub-contractor” who will take the responsibilities

I like the creative thinking Unfortunately even if I delegate operations I would still legally own the data, and would ultimately be financially liable for violations. Even if there were some loophole, I would need to consult my attorney to further advise and draw up agreements, which at a rate of $ 900 / hour could still be very expensive for me.

I think the best option is to move the forum to reddit or google groups as suggested by @ogarcia.

[bradrydzewski]

https://www.reddit.com/r/droneci

[bradrydzewski]

In case anyone is interested, this basically described what has been happening to me:
https://jacquesmattheij.com/so-your-start-up-receive-the-nightmare-gdpr-letter

The sad thing is that one email came from the co-founder of a Startup out of Germany. I cannot believe a startup founder would troll an open source project like this. It is very sad that people are using grpd, something that could provide a real social good, as a means to troll people.

Anyway, I digress …

[omerxx]

Sad to hear Brad. Thank you for the hard work!

[thomasf]

Perhaps this is cultural, since the United States is a very litigious society

Yeah, you are probably over reacting somewhat… Some people who runs businesses here like to complain about how taxes here in Sweden (about 50% from an employer perspective) makes it sooo hard to run a business, personally I prefer that every day in comparison to a USA-like litigious society… Sure we have some patent trolling and stuff like that in EU it’s nothing in comparison.

Even if there were some loophole, I would need to consult my attorney to further advise and draw up agreements, which at a rate of $ 900 / hour could still be very expensive for me.

… nobody knows how gdpr can/will practically be enforced since it hasn’t been tried yet. I’m not sure a law professional currently would give you a more safe outcome than doing it yourself, the actual law text isn’t extremely complicated either.

Please understand that I am not making a political statement for or against GDPR. I simply believe this is the easiest, most cost-effective path toward compliance.

I understand…

[bradrydzewski]

Good news. We have a community member that has volunteered to subsidize the legal fees and provide legal documents and consultation for gdpr compliance. As a result, I’m going to give this another shot and re-open the forum in the coming weeks.

[bradrydzewski]

[laszlocph]

So Reddit or Discourse?

It’s already confusing with readme vs docs.drone.io.