GDRP
Remove GDPR Data with a Scheduled Workflow Rule
The scheduled workflow rule to remove GDPR data (GDPRScheduledRemoval) runs daily at 2:00 AM and deletes all records with date_gdpr_removal = <current date>. The rule consults the application parameters and the end dates of the appropriate tables to remove obsolete records.
Specifically, it does the following:
- For records that have a value for end date, removes personal data from records when retention period is over. Replaces with null value personal data in tables like activity_log, hactivity_log, wr, hwr etc. Calculates retention period using application parameters.
- Removes data subjects according to the value in
date_gdpr_removal(em, afm_users, cf, contact, visitors, cb_accredit_person) WITHOUT checking if there are references in retention period. Note thatdate_gdpr_removalcan be manually set or updated by the on demand anonymization workflow rule. See GDPR Removal Date. - Removes data subject when retention period is over (em, afm_users, cf, contacts, visitors, cb_accredit_person) WITHOUT checking if there are references in retention period.
See also:
GDPR-Related Fields in the Archibus Schema