2nd CRAFT-OA Summer School for Journal Editors - GDPR

The General Data Protection Regulation (GDPR), enacted in 2018, establishes stringent guidelines for data protection across the European Union, emphasizing principles such as lawfulness, fairness, transparency, and accountability. This study examines the implications of GDPR for journal editorial workflows, focusing on enhancements introduced in Open Journal Systems (OJS) version 3.5. Addressing challenges identified in earlier versions, OJS 3.5 introduces robust GDPR-compliance features, including role-specific invitation workflows, automated tools for user data access and deletion, and privacy-centric default settings. Key upgrades encompass comprehensive cookie consent mechanisms, encrypted data storage, and the anonymization of analytics. These developments not only ensure compliance but also enhance editorial efficiency and user trust. The study underscores the importance of embedding GDPR principles into software design and provides a roadmap for future privacy-focused enhancements in OJS.