-
Notifications
You must be signed in to change notification settings - Fork 0
Add privacy policy and compliance documentation for Sentry PII collection #5
Copy link
Copy link
Open
Description
Context
As discussed in PR #2, the Sentry integration currently has sendDefaultPii: true enabled, which transmits user IP addresses, cookies, and request headers to Sentry for error monitoring.
Required Actions
Before this setting can remain enabled in production, the following compliance requirements need to be addressed:
- Privacy Policy: Create and publish a privacy policy that discloses PII collection for error monitoring purposes
- Data Processing Addendum: Execute a Data Processing Addendum (DPA) with Sentry if handling EU personal data
- User Consent: Implement a user consent mechanism where legally required by jurisdiction
- Internal Documentation: Document why PII collection is required and ensure appropriate approval
References
- PR: feat: implemented sentry #2
- Discussion: feat: implemented sentry #2 (comment)
- Requested by: @eswaldots
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels