Documentation to resolve 9a and 7 conflict

[nathanbaleeta]

Digital Public Goods must be designed and developed to comply with privacy and other applicable laws according to indicator #7 in the DPG standard. A few digital solutions claim exception to this indicator, however a further discussion/ assessment at the DPG standards council will be necessary to resolve which digital solutions can be exempted. Below are corresponding responses provided by individual projects:

• farmOS - farmOS follows true data sovereignty. Data sovereignty is the idea that data is subject to the laws and governance structures within the nation it is collected. The concept of data sovereignty is closely linked with data security, cloud computing and technological sovereignty.
• Open Referral - Open Referall doesn't traffic any personal information to which laws might apply. We produce non-proprietary specifications for exchanging public information.
• Somleng. To the best of our knowledge, Somleng does not store any PII for the beneficiaries. The only potential PII that we collect and store is the beneficiary phone number. As such, as an open source project, we do not think GDPR applies to Somleng.