Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] GDPR: removing history #377

Open
edwinvandenbelt opened this issue Jun 18, 2021 · 1 comment · May be fixed by #457
Open

[FEATURE REQUEST] GDPR: removing history #377

edwinvandenbelt opened this issue Jun 18, 2021 · 1 comment · May be fixed by #457
Assignees
Labels
WT1 To be discussed at the next meeting WT2
Milestone

Comments

@edwinvandenbelt
Copy link
Collaborator

Is your feature request related to a problem? Please describe.

According to GDPR, an end-user should be able to request the removal of his/her history. It cannot be done right now.

Urgency

To facilitate in becoming a GDPR compliant implementation in a standardized way

Describe the solution you'd like

Add an endpoint removing bookings (per booking-id). The functional request is actually to remove all personal information from this booking, it shouldn't be possible to trace it to a person. This means removal of references to persons (id), but also driver license, etc. This endpoint should be in the support module.

Describe alternatives you've considered

Removal based on a person's id, but this doesn't hold in the case of rotating person ids.

Possible Implementation

DELETE /booking/{id}. Although it is starting with /bookings/, it's not part of the booking module

@edwinvandenbelt edwinvandenbelt added the WT1 To be discussed at the next meeting label Jun 18, 2021
@edwinvandenbelt edwinvandenbelt added this to the Dragonfly - 1.3.0 milestone Sep 8, 2021
@JefHeyse
Copy link

TO and MP have a legal and fiscal obligations to maintain certain records in line with the use/rental of [their] assets.
They should publish the retention period of specific information.
If a user has booked and/or used assets - it will not be possible to remove the personal info unless the retention period has been reached.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
WT1 To be discussed at the next meeting WT2
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants