Profile pictures should be a problem for Brazil LGPD?

[Flavio Beck]

Hello,

Since Confluence pages can be exported to PDF and shared by email, personal information can be shared as well.

For example, the user macro contains Name, email and user profile picture.

To take care of user data privacy, how to mitigate the risk of data exposure?

1) remove all user picture (it is not necessary for business) and keep only name and email.

2) require some agreement from users to expose picture if they want to upload this.

3) other?

[Kurt Klinner]

@Flavio Beck 

Hi Flavio,

my personal take on that would be to have a documented agreement with your users to make them aware that they might export personal data, besides exporting a page you could also download the html or take a screenshot that would contain the same information, from this point of view i think you should go for the agreement.

There are some marketplace apps out there that partially could help 

https://marketplace.atlassian.com/apps/7019/scroll-pdf-exporter-for-confluence?hosting=datacenter&tab=overview could be interesting as it has some options to restrict user permissions to export and also offers some features to change the look and feel

https://marketplace.atlassian.com/apps/1216186/pii-protector-for-confluence?hosting=server&tab=overview

you might want to have a look to this.

Hope that helps

All the best

Kurt