1108805 - Creation of new data compliance bug

Status: RESOLVED FIXED

(bugzilla.mozilla.org :: Custom Bug Entry Forms, defect, P2)

Description

[Merwin]

The legal/policy team is revamping our privacy review process and changing these to "data compliance reviews." As part of that, we need to get rid of the privacy bugs in Bugzilla and need a new bug template for data compliance.

We are requesting the following changes:
1) rename the "Data Safety" bug template (https://bugzilla.mozilla.org/enter_bug.cgi?product=Data%20Safety) as a "Data Compliance" bug.  Or, alternatively, create a new data compliance bug template and delete the old data safety bug. 
2) putting me as the assignee with Alina Hua and Stacy Martin on the cc line.  
3) include a drop down that lists the business unit of the requester (Firefox, Cloud Services, FxOS, Foundation, Engagement, IT, Content Services, Platform, Other) and in the component field, a list of requests (general data compliance, vendor review, privacy policy, and other).

Thanks,
Marshall

Comment 1

[Alina Hua]

If you delete the "Data Safety" bugs, will this delete any old bugs tied to that category?  It would be preferable not to do this as there is history in those bugs for some past work. Would it be possible instead to decommission the Data Safety bugs / category from being used in the future, and just create a new Data Compliance bug? 

Thanks,

Alina

Comment 2

[Merwin]

I was assuming no - this would not delete old bugs.  If the answer is otherwise, then we certainly should not delete the bug. For clarity purposes, I just want to ensure that one can no longer file a "Data Safety" or "Privacy Review" bug.

Comment 3

[David Lawrence [:dkl]]

I have changed the product name from "Data Safety" to "Data Compliance". Please update any saved Bugzilla searches to reflect the name change if necessary. 

Also, I have updated the default assignee and default cc to the people mentioned in 2) of comment 0.

After an IRC discussion, merwin is going to attach details to this bug report outlining a new custom bug entry form that simplifies the data that is being requested and also allows for adding the new two new questions for business unit and the selected component.

dkl

Comment 4

[Merwin]

Thank you David.

Here are the additional field I would like in a custom data compliance bug.

Intro:
[BOLD] Data Compliance
Looking to make changes to your data collection and handling, request changes to your business unit's data practices or request & document exceptions to those changes, or raise broader data collection issues with the Data compliance team? Please fill out this form.
 
[BOLD, required field] Type of Request - A drop down field with general data compliance, vendor review, privacy policy, and other

[BOLD, required field] Area - Firefox, Cloud Services, FxOS, Foundation, Engagement, IT, Content Services, Platform, Other

[BOLD, required field] Summary "Describe the issue in one sentence"

[BOLD, required field] Description "Describe the data compliance issue."

[BOLD, required field] When  "Describe the timeline or due date.

[BOLD, required field] Urgency 

Check Box "Does this request involve a change in data collection or handling?" [Yes/No]

Check Box "Does this request involve a change in to the business unit's data practices?" [Yes/No]

Other "Please include any additional information, including links to relevant material, details regarding user benefit, etc."

Comment 5

[David Lawrence [:dkl]]

Sorry for the delay with this. I have put up what I have so far on our testing instance for your feedback. You can find it here:

https://bugzilla-dev.allizom.org/form.data.compliance

or long form:

https://bugzilla-dev.allizom.org/enter_bug.cgi?product=Data+Compliance&format=data-compliance

Let me know what needs to change.

dkl

Comment 6

[Merwin]

Dave, 

This looks great.  Can you change the lead text to read: "Looking to make changes to your data collection and handling, request changes to your business unit's data practices or request & document exceptions to those practices, or raise broader data collection issues with the data compliance team? Please fill out this form."

Thanks!
Marshall

Comment 7

[David Lawrence [:dkl]]

(In reply to merwin from comment #6)
> Dave, 
> 
> This looks great.  Can you change the lead text to read: "Looking to make
> changes to your data collection and handling, request changes to your
> business unit's data practices or request & document exceptions to those
> practices, or raise broader data collection issues with the data compliance
> team? Please fill out this form."
> 
> Thanks!
> Marshall

Sorry for the delay due to the holidays and being sick part of the time. I have updated the test instance with the text above.

https://bugzilla-dev.allizom.org/form.data.compliance

dkl

Comment 8

[Merwin]

Thanks David.  Looks good.

Comment 9

[David Lawrence [:dkl]]

(In reply to merwin from comment #8)
> Thanks David.  Looks good.

Thanks. Will be in the next code push hopefully next week.

dkl

Comment 10

[David Lawrence [:dkl]]

This is live now.

Comment 11

[Merwin]

David,

I have the additional minor requests for this bug. 
1) Can you make this bug default mozilla confidential?
2) As noted in Bug 1108816, where is says "*Description... Describe the data compliance issue." can you changes that to read "*Description... Describe the data compliance issue: If your request involves changes or additional data collection, please describe that collection, including specific fields, where the data will be stored, how long it will be stored, and who will have access to the data."
3) Can you make the data compliance form the default landing page for data compliance?  Currently folks are going https://bugzilla.mozilla.org/enter_bug.cgi?product=Data%20Compliance, which then says "This product has task-specific bug forms that should be used if appropriate:"

Comment 12

[David Lawrence [:dkl]]

(In reply to merwin from comment #11)
> David,
> 
> I have the additional minor requests for this bug. 
> 1) Can you make this bug default mozilla confidential?
> 2) As noted in Bug 1108816, where is says "*Description... Describe the data
> compliance issue." can you changes that to read "*Description... Describe
> the data compliance issue: If your request involves changes or additional
> data collection, please describe that collection, including specific fields,
> where the data will be stored, how long it will be stored, and who will have
> access to the data."
> 3) Can you make the data compliance form the default landing page for data
> compliance?  Currently folks are going
> https://bugzilla.mozilla.org/enter_bug.cgi?product=Data%20Compliance, which
> then says "This product has task-specific bug forms that should be used if
> appropriate:"

As this bug was already complete and these are change requests to the live form, I have moved this to bug 1130590.

dkl