Personal Data Deletion
As a part of GDPR compliance, ERPNext has Personal Data Deletion.
Personal data deletion tool enables a user to anonymize all the personally identifiable data a user has generated while using ERPNext. That is, personally identifiable information will be randomized. This includes personally identifiable data from your user account like: username, full name, birth date, phone numbers, mobile numbers, location, interests, bio, email signature, Email, Contact, Address, Communication, etc. It also includes data from Leads and Opportunities, the details you have saved like phone numbers, mobile numbers, fax, website, and name.
However, this excludes data that is required by law to be maintained by a business.
1. How to request the deletion of user data
To begin deleting personally identifiable data, you need to visit [host-name]/request-to-delete-data (e.g. example.erpnext.com/request-to-delete-data) in the URL field.
Enter the email associated with your ERPNext account. After submitting your request, you will receive a success response.
This will send an email with a verification link to delete data to the email address associated with the user.
Once the user clicks on the verification link. A confirmation message will be displayed.
2. How deleting user's personal data works
The request to delete data is recorded in the doctype "Personal Data Deletion Request".
This doctype maintains three states of status to complete the process of removal of user data.
2.1 Pending Verification
This status indicates that the user has requested data deletion via the web-form. However, verification of this request is still pending. Search for Personal Data Deletion Request from the search bar.
2.2 Pending Approval
This indicates that the user has verified the request via email. This enables the option of "Delete Data" for System Managers.
2.3 Deleted
This indicates that the System Manager has clicked on the "Delete Data" button. This means that the user's personally identifiable data has been anonymized.
