Art. 18 Right to Restriction of Processing

1 Initial Problem

The personal data specifically the First name, Last name and User name and Birthday and similar fields of the user object are to be set inactive:

• retained, not deleted
• no longer visible and editable for anybody but an administrator. 

What is meant by "restricted" is indicated in Art. 4 Nr. 3 GDPR. 

2 Conceptual Summary

ILIAS offers the restriction in a self-service-tab in the Personal Settings in the metabar 

3 User Interface Modifications

3.1 List of Affected Views

• Personal Settings > new tab "Resrict Processing"

3.2 User Interface Details

3.3 New User Interface Concepts

None

3.4 Accessibility Implications

No forseeable accessibility issues

4 Technical Information

{ The maintainer has to provide necessary technical information, e.g. dependencies on other ILIAS components, necessary modifications in general services/architecture, potential security or performance issues. }

5 Privacy

{ Please list all personal data that will need to be stored or processed to implement this feature. For each date give a short explanation why it is necessary to use that date. }

6 Security

{ Does the feature include any special security relevant changes, e.g. the introducion of new endpoints or other new possible attack vectors. If yes, please explain these implications and include a commitment to deliver a written security concept as part of the feature development. This concept will need an additional approvement by the JourFixe. }

7 Contact

• Author of the Request: Tödt, Alexandra [atoedt]
• Maintainer: Kergomard, Stephan [skergomard]
• Implementation of the feature is done by: {The maintainer must add the name of the implementing developer.}

8 Funding

If you are interest in funding this feature, please add your name and institution to this list.

• …

9 Discussion

Tödt, Alexandra [atoedt]: Maintainer Stephan Kergomard is fully booked for 2023 but is willing to look at this in 2024 for ILIAS 10. 

10 Implementation

{ The maintainer has to give a description of the final implementation and add screenshots if possible. }

Test Cases

Test cases completed at {date} by {user}

• {Test case number linked to Testrail} : {test case title}

Privacy

Information in privacy.md of component: updated on {date} by {user} | no change required

Approval

Approved at {date} by {user}.