Add governed DSAR coverage for identified poll participation #4

New Issue

2026-08-21T11:55:22+02:00

zemion commented

2026-08-21 11:55:22 +02:00

Goal

Cover identified Poll invitations, responses, and operator attribution through the Core data-subject request workflow tracked by GovOPlaN/govoplan#47.

Scope

provide and document privacy.dsar.poll
correlate exact tenant, respondent, and normalized email selectors with optional Poll narrowing
export bounded subject-owned answers and invitation state without token hashes or gateway/policy metadata
export minimized creator and lifecycle actor attribution
require manual review for response/invitation erasure where results or participation evidence may be affected
document that truly anonymous responses cannot be correlated
add focused provider and Core workflow coverage

Acceptance criteria

unrelated respondents, email addresses, polls, and tenants remain excluded
token hashes, fingerprints, metadata, and participation-policy payloads are excluded
automatic erasure cannot silently alter poll results
focused tests, Ruff, and manifest checks pass

## Goal Cover identified Poll invitations, responses, and operator attribution through the Core data-subject request workflow tracked by GovOPlaN/govoplan#47. ## Scope - provide and document `privacy.dsar.poll` - correlate exact tenant, respondent, and normalized email selectors with optional Poll narrowing - export bounded subject-owned answers and invitation state without token hashes or gateway/policy metadata - export minimized creator and lifecycle actor attribution - require manual review for response/invitation erasure where results or participation evidence may be affected - document that truly anonymous responses cannot be correlated - add focused provider and Core workflow coverage ## Acceptance criteria - unrelated respondents, email addresses, polls, and tenants remain excluded - token hashes, fingerprints, metadata, and participation-policy payloads are excluded - automatic erasure cannot silently alter poll results - focused tests, Ruff, and manifest checks pass

zemion commented

2026-08-21 12:35:48 +02:00

Implemented and pushed in 02ec542.

Added privacy.dsar.poll with explicit invitation/submission/response linkage, bounded answer export, anonymous-response non-correlation, sensitive-token exclusions, tests, and user/admin documentation.
Verified with the module test and lint suite.
Verified across the workspace with tools/checks/check-focused.sh: manifest and boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks all passed.

Implemented and pushed in `02ec542`. - Added privacy.dsar.poll with explicit invitation/submission/response linkage, bounded answer export, anonymous-response non-correlation, sensitive-token exclusions, tests, and user/admin documentation. - Verified with the module test and lint suite. - Verified across the workspace with `tools/checks/check-focused.sh`: manifest and boundary checks, backend suites, 59 WebUI module permutations, seven Playwright conformance tests, and module-specific frontend checks all passed.

zemion closed this issue

2026-08-21 12:35:49 +02:00

zemion referenced this issue from GovOPlaN/govoplan

2026-08-21 12:36:23 +02:00

[Privacy] Complete DSAR provider coverage across data-owning modules #47

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: GovOPlaN/govoplan-poll#4