GDPR - Feedback Data Deletion and Anonymization

When a user leaves a Legal Entity organizational unit (OU) and requests to be forgotten OR that user’s data is outside of the data retention period, feedback is impacted in the following ways:

  • Feedback Request - If the user has requested feedback, then the feedback request and any responses and ratings are deleted.
    • When a data deletion request is made based on time, then the feedback request date is used to determine when the data is deleted.
  • Feedback Responder - If the user has replied to a feedback request for another user, user's core data such as First Name and Last Name are anonymized. That is, the responder's ratings and comments remain intact, but any references to the responder are anonymized.
    • When a data deletion request is made based on time, then the feedback post date is used to determine when the data is anonymized.
  • Unsolicited Feedback Post - If the user has received unsolicited feedback or a badge from another user, then the unsolicited feedback and any responses to the post for that recipient are deleted. If the user has provided unsolicited feedback for another user, then the user's core data such as First Name and Last Name are anonymized. That is, the user's feedback remains intact, but any references to the user are anonymized.
    • When a data deletion request is made based on time, then the feedback post date is used to determine when the data is deleted.