Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

GDPR for dedicated Server

Discussion in 'Security' started by fullfatdesigns, Mar 25, 2018.

  1. fullfatdesigns

    fullfatdesigns Active Member

    Joined:
    Aug 1, 2014
    Messages:
    39
    Likes Received:
    6
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hi

    I've been reading up on GDPR to advise our client on changes to their websites, but I'm after peoples view on what we need to do on our server.

    We have a dedicated server with about 20 websites on which back-ups to Amazon S3 every night (keeps 2 weeks worth). The whm/cpanel is on a https and if all the sites are switched to https (some are anyway), is there anything else I need to put in place?

    Just after peoples views as I couldn't seem to find any guide for the actual server, just what to do on the websites.

    Thanks
    Wayne
     
    #1 fullfatdesigns, Mar 25, 2018
  2. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    16,066
    Likes Received:
    348
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    #2 Infopro, Mar 25, 2018
  3. fullfatdesigns

    fullfatdesigns Active Member

    Joined:
    Aug 1, 2014
    Messages:
    39
    Likes Received:
    6
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Brilliant, thank you. I'll check it out. I didn't think to search the main site, only searched the forums.
     
    #3 fullfatdesigns, Mar 25, 2018
    Infopro likes this.
  4. james1985

    james1985 Member

    Joined:
    Sep 24, 2016
    Messages:
    15
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Barry
    cPanel Access Level:
    Root Administrator
    The blog doesn’t really explain how to make a cPanel server GDPR compliant unless I missed something?

    Do you have a full rundown of tweaks and changes that need to be made to comply with the legislation passed some time ago??

    I was under the impression that all backups need to be encrypted where stored?

    Also I feel the email system is lacking security, for example if a cPanel login was compromised, you can easily click and view peoples emails in cPanel? Shouldn’t the email system be more secure? Even against server admins, Ask for the password? Even encrypted? A lot of personal information can be held in emails, with cPanel, one click and you can see all emails in plain text In webmail.

    Many Admin teams as we know are located outside the EU and with the new legislation bringing in the tightening of data leaving the EU, is it possible to help secure clients data on the server from such security risks?
     
    #4 james1985, Mar 28, 2018
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,734
    Likes Received:
    1,706
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @james1985,

    Here are a couple of quotes from the blog post related to how you can approach GDPR compliance for your own company:

    As far as encrypted backups and emails, those are not direct features offered with the cPanel & WHM product at this time, but you can find discussion of such features with potential solutions at:

    Backups - encryption of backups (symmetric and asymmetric)
    Email storage encryption

    Thank you.
     
    #5 cPanelMichael, Mar 29, 2018
  6. lorio

    lorio Well-Known Member

    Joined:
    Feb 25, 2004
    Messages:
    270
    Likes Received:
    7
    Trophy Points:
    168
    cPanel Access Level:
    Root Administrator
    The GDPR is not 100% the same in every European country. Local law can overrule same passages. cPanel Inc. has to first ensure they get their stuff right (e.g what gets transmitted from every cPanel/WHM installation towards cPanel Inc.). The most complex thing seem to be able to export everything you saved about person and hand it over to that person at any point. That is the right of every user hitting a server.

    The most basic thing cPanel could offer would be a tool, which removes IPs from logs. Or shortens IPs or replaces IPs with hashes.
    E.g. scripts like this https://www.privacyfoundation.ch/en/services/anonip.html

    You can see such tools around web analytics tools for years to be in compliance with certain European countries. GDPR makes the IP address a personal data of the user (even when the IP is assigned dynamically via the ISP of a user).

    You will see more and more threads here in the future.
    E.g. GDPR and Statistical Analytics

    European webhosting companies which base their business on cPanel or other controlpanels will need to invest more time to customize the setups or demand features.
     
    #6 lorio, Apr 11, 2018
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,734
    Likes Received:
    1,706
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hi @lorio,

    Thank you for taking the time to provide us with feedback on this topic. I encourage you to open a feature request for this at:

    Submit A Feature Request

    Note that our feature request website is currently undergoing maintenance, but should resume functioning soon.

    Thank you.
     
    #7 cPanelMichael, Apr 11, 2018
  8. DennisMidjord

    DennisMidjord Well-Known Member

    Joined:
    Sep 27, 2016
    Messages:
    118
    Likes Received:
    7
    Trophy Points:
    18
    Location:
    Denmark
    cPanel Access Level:
    Root Administrator
    Is this really required now? Should the IP be removed from the log files?
    Seems like a very bad idea.
     
    #8 DennisMidjord, Apr 11, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - GDPR dedicated Server
  1. nickwuk

    GDPR and Statistical Analytics

    nickwuk, Apr 6, 2018, in forum: General Discussion
    Replies:
    5
    Views:
    146
    lorio
    Apr 11, 2018
  2. neuf007

    Migrating VPS to Dedicated Server question

    neuf007, Apr 19, 2018 at 6:46 AM, in forum: Data Protection
    Replies:
    2
    Views:
    31
    cPanelLauren
    Apr 19, 2018 at 11:18 AM
  3. Craig.

    Prevent Unparked Domains Resolving on Dedicated IP

    Craig., Mar 7, 2018, in forum: Bind / DNS / Nameserver Issues
    Replies:
    1
    Views:
    73
    cPanelMichael
    Mar 7, 2018
  4. WMisiedjan

    SOLVED Running Cron Job with Dedicated IP Address

    WMisiedjan, Mar 6, 2018, in forum: General Discussion
    Replies:
    5
    Views:
    93
    WMisiedjan
    Mar 6, 2018
  5. WebHostPro

    If a reseller uses a shared IP dedicated to him..

    WebHostPro, Feb 4, 2018, in forum: General Discussion
    Replies:
    2
    Views:
    130
    cPanelMichael
    Feb 13, 2018

Share This Page