Ensure GDPR Compliance for Peer Mentor Location Data Storage
The Privacy Consent Service manages the opt-in consent flow presented to peer mentors during onboarding or profile setup. The consent disclosure clearly explains what location data is stored (municipality/postal code area centroid, not real-time GPS), who can access it (coordinators within the same organisation only), and how it is used (geographic matching for assignment allocation). Coordinators can see on the map or in the mentor profile whether a mentor has consented or declined. Location data is only stored in the Location Repository and surfaced on the map for mentors with recorded consent. Consent can be withdrawn at any time.
User Story
Acceptance Criteria
- Given a peer mentor has not provided location consent, when I view the map as a coordinator, then no location pin is displayed for that mentor
- Given a peer mentor has consented, when I view the map, then their location pin is visible with availability colour coding
- Given a peer mentor withdraws consent, when their consent record is updated, then their pin is removed from the map for all coordinators within the next data refresh
- Given I view a mentor profile reached via the map, when I check consent status, then it is clearly indicated whether the mentor has opted in to location storage
- Given the consent flow is triggered for a mentor, when they review the disclosure, then it explicitly states that only municipality/postal-code-level data is stored and identifies who has access
Business Value
GDPR compliance is a legal requirement and a prerequisite for the geographic matching feature to operate at all. Handling location consent incorrectly exposes the organisation to regulatory penalties and erodes peer mentor trust, which could increase volunteer churn. A transparent consent model that stores only coarse-grained location data balances privacy protection with operational utility.
Components
- Privacy Consent Service service
- Location Repository data
- Geographic Matching Service service