The GDPR right to be forgotten - applies from May 25th 2018
Using Jamroom
Today(22nd May 2018) I received this notice from an internet service that I signed up for about four years ago and never used:
"The European Union passed some wonderful rules to protect privacy: GDPR. It requires that all services limit the length of time they keep inactive accounts on their servers. While this law is only meant to protect European residents, we’ve decided that privacy is something everyone should have."
etc.
(GDPR = General Data Protection Regulation. It is well explained on Wikipedia.)
The company wants me to renew my account, but will delete all my old data if I don't ask for the renewal. (I'm not renewing).
1. We had a discussion recently here in JR (sorry, I have not found the thread yet) about how to automatically identify inactive members and then eventually delete them. Now it seems this is something we should do by law, if we are operating within Europe, or want to be compliant with European law for our European members.
So we do need an automatic time-limited membership system, and the time point for reference should be when someone last logged in. If they have not been active for a long time since that point (e.g. 2-3 years?) then they need to be shunted to a quota where the data can be reviewed, and the accounts deleted. We also have to make sure that old personal information is deleted from system backups.
2. With Kickbox, we can already identify and move accounts with invalid email addresses to a private quota, where the profiles are not visible online to site visitors and users.
We cannot delete the holding quota until all accounts in the quota are deleted, and we can only delete those accounts one by one, which is tedious for hundreds of old accounts. Seems like I will have to do this though.
3. For situations (1) and (2), it would be useful to be able to select all accounts that had their last login at a certain date or further back in time, and then delete them all, and have that happen in the backup system the next time a new backup copy is made.
Anything else I should be forgetting?
updated by @researchcooperative: 08/27/18 08:07:58AM