DeletionPolicy - Revision history

Administrator at 08:59, 13 August 2021

2021-08-13T08:59:57Z

@@ Line 1: / Line 1: @@
 [[Category:Production_guidelines]]
 = User deletion types =
@@ Line 164: / Line 134: @@
 = Possible policies =
 == Keep collected data ==
 '''Yes''' – When need to see historic data

Administrator: /* DCS Data */

2021-08-06T06:03:13Z

DCS Data

← Older revision		Revision as of 06:03, 6 August 2021
Line 157:		Line 157:
	Green is "Yes", Yellow is "Partially", red is "No".		Green is "Yes", Yellow is "Partially", red is "No".

	= DCS Data =		= DCS Data =

	When a questionnaire is ~~deleted~~ (Any type), all DCS associated with the questionnaire should either be deleted with it or rebuilt to remove any previous personal data.		When a questionnaire is archieved (Any type), all DCS associated with the questionnaire should either be deleted with it or rebuilt to remove any previous personal data.

	When a user is ~~deleted~~ (Any type), then it is nearly impossible to detect which DCS that user is included in. Any DCS policy must therefore specify that no personal data is included in a DCS, or that the DCS must be periodically rebuilt/deleted to prevent retention of data that should be deleted.		When a user is archieved (Any type), then it is nearly impossible to detect which DCS that user is included in. Any DCS policy must therefore specify that no personal data is included in a DCS, or that the DCS must be periodically rebuilt/deleted to prevent retention of data that should be deleted.

	= Possible policies =		= Possible policies =

Administrator: /* Questionnaire deletion types */

2021-08-05T10:08:43Z

Questionnaire deletion types

← Older revision		Revision as of 10:08, 5 August 2021
Line 143:		Line 143:
	\| '''Unset User'''		\| '''Unset User'''
	\| style="background-color: rgb(255,255,0); text-align: center" \| [2]		\| style="background-color: rgb(255,255,0); text-align: center" \| [2]
	~~<br>~~
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	<br>		<br>

Administrator: /* Questionnaire deletion types */

2021-08-05T10:08:11Z

Questionnaire deletion types

← Older revision		Revision as of 10:08, 5 August 2021
Line 136:		Line 136:
	\|-		\|-
	\| '''Anonymize QAS'''		\| '''Anonymize QAS'''
	\| style="background-color: rgb(~~255~~,~~255~~,0); ~~text-align: center~~" \| ~~[2]~~		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	<br>		<br>
Line 142:		Line 142:
	\|-		\|-
	\| '''Unset User'''		\| '''Unset User'''
	\| style="background-color: rgb(0,~~153~~,0);" \|		\| style="background-color: rgb(255,255,0); text-align: center" \| [2]
	<br>		<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|

Administrator: /* Questionnaire deletion types */

2021-08-05T10:07:21Z

Questionnaire deletion types

← Older revision		Revision as of 10:07, 5 August 2021
Line 113:		Line 113:

	{\| class="wikitable"		{\| class="wikitable"

	\| width="150" \|		\| width="150" \|
	\| width="150" \|Keeps statistics		<br>
	\| width="150" \|Keeps survey data		\| width="150" \| Keeps statistics
	\| width="190" \|Deletes personal ~~QAS~~ data		\| width="150" \| Keeps survey data
	\|-		\| width="190" \| Deletes personal survey data
	\|'''Delete Data'''		\|-
			\| '''Delete Data'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	\|'''Delete QAS'''		\|-
			\| '''Delete QAS'''
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	\|'''Anonymize QAS'''		\|-
	\| style="background-color: rgb(255,255,0); text-align: center" \|[2]		\| '''Anonymize QAS'''
			\| style="background-color: rgb(255,255,0); text-align: center" \| [2]
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(255,255,0); text-align: center" \|[1]		<br>
	\|-		\| style="background-color: rgb(255,255,0); text-align: center" \| [1]
	\|'''Unset User'''		\|-
			\| '''Unset User'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(255,255,0); text-align: center" \|[1]		<br>
	\|-		\| style="background-color: rgb(255,255,0); text-align: center" \| [1]
	\|'''Do nothing'''		\|-
			\| '''Do nothing'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\|}		\|}
	Green is "Yes", Yellow is "Partially", red is "No".		Green is "Yes", Yellow is "Partially", red is "No".

Administrator: /* User deletion types */

2021-08-05T10:07:11Z

User deletion types

← Older revision		Revision as of 10:07, 5 August 2021
Line 45:		Line 45:
	\| width="150" \| Keeps QAS link		\| width="150" \| Keeps QAS link
	\| width="150" \| Deletes personal data		\| width="150" \| Deletes personal data
	\| width="190" \| Deletes personal ~~QAS~~ data		\| width="190" \| Deletes personal survey data
	\|-		\|-
	\| '''Anonymize user'''		\| '''Anonymize user'''

Administrator: /* Questionnaire deletion types */

2021-08-05T10:06:32Z

Questionnaire deletion types

← Older revision		Revision as of 10:06, 5 August 2021
Line 108:		Line 108:
	'''Delete QAS''': Describes the permanent deletion of all collected data in a QAS, but not affect the user or any of the user’s other info.		'''Delete QAS''': Describes the permanent deletion of all collected data in a QAS, but not affect the user or any of the user’s other info.

	'''Anonymize QAS''': Describes permanent deleting all personal identifiable information in the QAS and disconnecting the QAS from the user that filled it out but maintains the collected data. This can be done by converting it to No user, the Anonymous user or a new anonymous user. Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]].		'''Anonymize QAS''': Describes permanent deleting all personal identifiable information in the QAS, but maintains the other collected data.

			'''Unset User''': Describes permanent deleting all personal identifiable information in the QAS and disconnecting the QAS from the user that filled it out but maintains the other collected data.

	'''Destroy questionnaire''': Describes the permanent deletion of the questionnaire and all associated QAS, including all children of the questionnaire. I.e. if sample users are imported as children to questionnaire, these are destroyed as well. Same with DCS’ that are children of the questionnaire.
	{\| class="wikitable"		{\| class="wikitable"

Line 116:		Line 117:
	\| width="150" \|Keeps statistics		\| width="150" \|Keeps statistics
	\| width="150" \|Keeps survey data		\| width="150" \|Keeps survey data
	\| width="~~150~~" \|Deletes personal data		\| width="190" \|Deletes personal QAS data
	\|-		\|-
	\|'''Delete Data'''		\|'''Delete Data'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(255,~~255~~,0);" \|		\| style="background-color: rgb(255,0,0);" \|
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		\|-
Line 129:		Line 130:
	\|-		\|-
	\|'''Anonymize QAS'''		\|'''Anonymize QAS'''
	\| style="background-color: rgb(255,255,0); text-align: center" \|~~Partially~~		\| style="background-color: rgb(255,255,0); text-align: center" \|[2]
			\| style="background-color: rgb(0,153,0);" \|
			\| style="background-color: rgb(255,255,0); text-align: center" \|[1]
			\|-
			\|'''Unset User'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			\| style="background-color: rgb(255,255,0); text-align: center" \|[1]
	\|-		\|-
	\|'''Do nothing'''		\|'''Do nothing'''

Administrator at 09:57, 5 August 2021

2021-08-05T09:57:39Z

← Older revision		Revision as of 09:57, 5 August 2021
Line 45:		Line 45:
	\| width="150" \| Keeps QAS link		\| width="150" \| Keeps QAS link
	\| width="150" \| Deletes personal data		\| width="150" \| Deletes personal data
			\| width="190" \| Deletes personal QAS data
	\|-		\|-
	\| '''Anonymize user'''		\| '''Anonymize user'''
			\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	<br>		<br>
Line 62:		Line 65:
	<br>		<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
			\| style="background-color: rgb(0, 153, 0);" \|
	<br>		<br>
	\| style="background-color: rgb(0, 153, 0); text-align: center;" \|		\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
Line 69:		Line 74:
	\| style="background-color: rgb(255,255,0); text-align: center" \| [2]		\| style="background-color: rgb(255,255,0); text-align: center" \| [2]
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
			\| style="background-color: rgb(255,0,0);" \|
	<br>		<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
Line 76:		Line 83:
	\|-		\|-
	\| '''Do nothing'''		\| '''Do nothing'''
			\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	<br>		<br>

Administrator: /* User deletion types */

2021-08-05T09:52:34Z

User deletion types

← Older revision		Revision as of 09:52, 5 August 2021
Line 53:		Line 53:
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	<br>		<br>
	\| style="background-color: rgb(0, ~~153~~, 0); text-align: center;" \|		\| style="background-color: rgb(255,255,0); text-align: center;" \|
	[1]<br>		[1]<br>
	\|-		\|-
Line 72:		Line 72:
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
	<br>		<br>
	\| style="background-color: rgb(0, ~~153~~, 0); text-align: center;" \|		\| style="background-color: rgb(255,255,0); text-align: center;" \|
	[1]		[1]
	\|-		\|-

Administrator: /* User deletion types */

2021-08-05T09:51:36Z

User deletion types

← Older revision		Revision as of 09:51, 5 August 2021
Line 35:		Line 35:
	'''Destroy user''': Describes the permanent deletion of the user and all associated QAS and data.		'''Destroy user''': Describes the permanent deletion of the user and all associated QAS and data.

	'''Anonymize user''': Describes the permanent deletion of all personal identifiable information for the user and in all associated QAS but preserves the link between all QAS. Then mark user as disabled~~. Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]]~~.		'''Anonymize user''': Describes the permanent deletion of all personal identifiable information for the user and in all associated QAS but preserves the link between all QAS. Then mark user as disabled.

	'''Unset user''': Describes the permanent deletion of all personal identifiable information for the user and all associated QAS and convert all QAS to delete the user link. Then destroy the user. ~~Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]].~~		'''Unset user''': Describes the permanent deletion of all personal identifiable information for the user and all associated QAS and convert all QAS to delete the user link. Then destroy the user.<br>
	{\| class="wikitable"		{\| class="wikitable"

	\| width="150" \|		\| width="150" \|
	\| width="150" \|Keeps statistics		<br>
	\| width="150" \|Keeps survey data		\| width="150" \| Keeps statistics
	\| width="150" \|Keeps QAS link		\| width="150" \| Keeps survey data
	\| width="150" \|Deletes personal data		\| width="150" \| Keeps QAS link
	\|-		\| width="150" \| Deletes personal data
	\|'''Anonymize user'''		\|-
	~~\| style="background-color: rgb(0,153,0);" \|~~		\| '''Anonymize user'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	\|'''Destroy user'''		\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
			[1]<br>
			\|-
			\| '''Destroy user'''
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
			\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
			<br>
			\|-
			\| '''Unset user'''
			\| style="background-color: rgb(255,255,0); text-align: center" \| [2]
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	~~\|'''Unset user'''~~
	~~\| style="background-color: rgb(255,255,0); text-align: center" \|Partially~~
	~~\| style="background-color: rgb(0,153,0);" \|~~
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
			\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
			[1]
			\|-
			\| '''Do nothing'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	~~\|'''Do nothing'''~~
	~~\| style="background-color: rgb(0,153,0);" \|~~
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(255,0,0);" \|		<br>
			\| style="background-color: rgb(255, 0, 0); text-align: center;" \|
			<br>
	\|}		\|}
			Green is "Yes", Yellow is "Partially", red is "No".

			[1]Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]].

	~~Green is "Yes"~~, ~~Yellow is "Partially", red is "No"~~.		[2]It will maintain the statistics within a questionnaire, but not statistics across user behaviour.

	The technical implementation of achieving any of these deletion methods may take advantage of marking the user as disabled or deleted and then batch up the actual deletion to a later date, but no more than 45 additional days delay. This will also make it possible to undo any wrongful deletions and make it possible to undo.		The technical implementation of achieving any of these deletion methods may take advantage of marking the user as disabled or deleted and then batch up the actual deletion to a later date, but no more than 45 additional days delay. This will also make it possible to undo any wrongful deletions and make it possible to undo.

← Older revision		Revision as of 09:51, 5 August 2021
Line 35:		Line 35:
	'''Destroy user''': Describes the permanent deletion of the user and all associated QAS and data.		'''Destroy user''': Describes the permanent deletion of the user and all associated QAS and data.

	'''Anonymize user''': Describes the permanent deletion of all personal identifiable information for the user and in all associated QAS but preserves the link between all QAS. Then mark user as disabled~~. Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]]~~.		'''Anonymize user''': Describes the permanent deletion of all personal identifiable information for the user and in all associated QAS but preserves the link between all QAS. Then mark user as disabled.

	'''Unset user''': Describes the permanent deletion of all personal identifiable information for the user and all associated QAS and convert all QAS to delete the user link. Then destroy the user. ~~Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]].~~		'''Unset user''': Describes the permanent deletion of all personal identifiable information for the user and all associated QAS and convert all QAS to delete the user link. Then destroy the user.<br>
	{\| class="wikitable"		{\| class="wikitable"

	\| width="150" \|		\| width="150" \|
	\| width="150" \|Keeps statistics		<br>
	\| width="150" \|Keeps survey data		\| width="150" \| Keeps statistics
	\| width="150" \|Keeps QAS link		\| width="150" \| Keeps survey data
	\| width="150" \|Deletes personal data		\| width="150" \| Keeps QAS link
	\|-		\| width="150" \| Deletes personal data
	\|'''Anonymize user'''		\|-
	~~\| style="background-color: rgb(0,153,0);" \|~~		\| '''Anonymize user'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	\|'''Destroy user'''		\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
			[1]<br>
			\|-
			\| '''Destroy user'''
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
			\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
			<br>
			\|-
			\| '''Unset user'''
			\| style="background-color: rgb(255,255,0); text-align: center" \| [2]
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	~~\|'''Unset user'''~~
	~~\| style="background-color: rgb(255,255,0); text-align: center" \|Partially~~
	~~\| style="background-color: rgb(0,153,0);" \|~~
	\| style="background-color: rgb(255,0,0);" \|		\| style="background-color: rgb(255,0,0);" \|
			<br>
			\| style="background-color: rgb(0, 153, 0); text-align: center;" \|
			[1]
			\|-
			\| '''Do nothing'''
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\|-		<br>
	~~\|'''Do nothing'''~~
	~~\| style="background-color: rgb(0,153,0);" \|~~
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
			<br>
	\| style="background-color: rgb(0,153,0);" \|		\| style="background-color: rgb(0,153,0);" \|
	\| style="background-color: rgb(255,0,0);" \|		<br>
			\| style="background-color: rgb(255, 0, 0); text-align: center;" \|
			<br>
	\|}		\|}
			Green is "Yes", Yellow is "Partially", red is "No".

			[1]Usage of this feature is dependent on questions marked with the proper [[Property name: Privacy level\|GDPR privacy setting]].

	~~Green is "Yes"~~, ~~Yellow is "Partially", red is "No"~~.		[2]It will maintain the statistics within a questionnaire, but not statistics across user behaviour.

	The technical implementation of achieving any of these deletion methods may take advantage of marking the user as disabled or deleted and then batch up the actual deletion to a later date, but no more than 45 additional days delay. This will also make it possible to undo any wrongful deletions and make it possible to undo.		The technical implementation of achieving any of these deletion methods may take advantage of marking the user as disabled or deleted and then batch up the actual deletion to a later date, but no more than 45 additional days delay. This will also make it possible to undo any wrongful deletions and make it possible to undo.