Deletion of Personal Data

Deletion of Personal Data

When considering compliance with data protection regulations, it is also necessary to consider compliance with industry-specific legislation in different countries. A typical potential scenario in certain countries is that personal data shall be deleted after the specified, explicit, and legitimate purpose for the processing of personal data has ended, but only if no other retention periods are defined in legislation, for example, retention periods for financial documents. Legal requirements in certain scenarios or countries also often require blocking of data in cases where the specified, explicit, and legitimate purposes for the processing of this data have ended, however, the data still has to be retained in the database due to other legally mandated retention periods. Sometimes, transactional data are personal data with relation to a master data object, e.g. a sales order with reference to a business partner. Therefore, the challenge for deletion and blocking is first to handle transactional data and finally other data, such as business partner data.

  • SAP Asset Intelligence Network provides a lean retention framework

    Default retention period is set to 5 years. Customer can enhance or decrease default retention period according to their individual requirements.

  • Supports blocking for

    • Soft deleted users
    • Contact persons of inactive organizations
    • Installation location contact persons of deleted equipment & function locations

  • Provides a report to access blocked users

    Access to the log records is restricted by adequate authorizations.

  • Supports erasure of personal data on expiry of retention period for the below information.

    • the blocked users (including contact persons) of active and inactive organizations

    • the user data of deleted objects (like users of inactive organizations, installation contact persons of deleted equipment and functional locations)

    • the contact persons of inactive organizations

    • Logs related to deleted users.

    • Nullify the user ids (for e.g. BP GUIDS in SAP Asset Intelligence Network) wherever applicable

  • Runs background job to erase personal data on expiration of retention periods