OH: Deletion of Personal Data in Occupational Health

Functions are available that simplify blocking and deletion of personal data with SAP Information Lifecycle Management (ILM).

Technical Details

Technical Name of Product Feature	EHS_HEA_ERP617_07
Product Feature Is	New
Country-Dependency	Valid for all countries
Software Component Version	EA_APPL 617
Application Component	SAP EHS Management as part of SAP ERP
Available From	SAP Enhancement Package 7 (SP07) for SAP ERP 6.0

Effects on Existing Data

These functions enable you to use the SAP Information Lifecycle Management (ILM) component to block and delete personal data in Occupational Health. You can block the following data as soon as business activities for which this data is needed are completed and residence time for this data has elapsed:

Medical Service
Assignment of Persons to Health Centers
Assignment of Health Surveillance Protocols to Persons
Personal Comments
Case History Data
Injury/Illness Log Data

After this time, only users who are assigned additional authorizations can access this data. If the retention period for data expires, personal data can be destroyed completely such that it can no longer be retrieved. Retention periods must be defined in the customer system.

An end of purpose check determines whether data is still relevant for business activities based on the retention period defined for the data. The retention period of data consists of the following phases:

1st phase: The relevant data is actively used.
2nd phase: The relevant data is actively available in the system.
3rd phase: The relevant data needs to be retained for other reasons.
For example, processing of data is no longer required for the primary business purpose, but to comply with legal rules for retention, the data must still be available.

In phase three, the relevant data is blocked. Blocking of data prevents the business users of SAP applications from displaying and using data that may include personal data and is no longer relevant for business activities. Blocking of data can impact system behavior in the following ways:

Display: The system does not display blocked data.
Change: It is not possible to change a business object that contains blocked data.
Create: It is not possible to create a business object that contains blocked data.
Copy/Follow-Up: It is not possible to copy a business object or perform follow-up activities for a business object that contains blocked data.
Search: It is not possible to search for blocked data or to search for a business object using blocked data in the search criteria.

It is possible to display blocked data if a user has special authorization; however, it is still not possible to create, change, copy, or perform follow-up activities on blocked data.

Effects on Customizing

Proceed as follows to simplify deletion of personal data in Occupational Health with SAP Information Lifecycle Management:

Activate the business function Information Lifecycle Management (ILM).
Make the required Customizing settings for SAP Information Lifecycle Management (ILM) in Customizing for SAP NetWeaver under the following path: Application Server Basis Services Information Lifecycle Management
Execute transaction IRMPOL and maintain the required retention rules for the following ILM objects of Occupational Health.
If you want to destroy critical diagnoses together with the case history for a person and not with the medical service to which they are assigned, set the environment parameter OH_CRIT_DIAG_DEL in Customizing under Environment, Health & Safety Basic Data and Tools Manage User Exits .

More Information

SAP Information Lifecycle Management
SAP Library for SAP ERP under http://help.sap.com/erp Application Help SAP ERP Central Component Logistics Environment, Health and Safety (EHS) Occupational Health (EHS-HEA) Data Destruction in Occupational Health
SAP Library for SAP ERP under http://help.sap.com/erp Security Information Security Guide SAP ERP Security Guides SAP ERP Central Component Security Guide Logistics Environment, Health and Safety (EHS)
SAP Note 2089119