GDRP

Remove GDPR Data with a Scheduled Workflow Rule

The scheduled workflow rule to remove GDPR data ( GDPRScheduledRemoval) runs daily at 2:00 AM and deletes all records with date_gdpr_removal = <current date> . The rule consults the application parameters and the end dates of the appropriate tables to remove obsolete records.

Specifically, it does the following:

  • For records that have a value for end date, removes personal data from records when retention period is over. Replaces with null value personal data in tables like activity_log, hactivity_log, wr, hwr etc. Calculates retention period using application parameters.
  • Removes data subjects according to the value in date_gdpr_removal (em, afm_users, cf, contact, visitors, cb_accredit_person) WITHOUT checking if there are references in retention period. Note that date_gdpr_removal can be manually set or updated by the on demand anonymization workflow rule. See GDPR Removal Date .
  • Removes data subject when retention period is over (em, afm_users, cf, contacts, visitors, cb_accredit_person) WITHOUT checking if there are references in retention period.

See also:

GDPR-Related Fields in the Archibus Schema

Setting GDPR Retention Periods for Automatic Anonymization

On Demand Anonymization