User Record Anonymization

After a user record is anonymized, certain fields are anonymized and other fields are deleted. Also, the Modification History section does not show any identifiable information.

When editing a user record that has been anonymized, changes cannot be saved. A message is displayed at the top of the user record to indicate that the user record has been anonymized and can no longer be edited.

A user record can only be anonymized if their status is Inactive.

When a user record is anonymized, the following information is anonymized:

  • Prefix
  • First Name
  • Middle Name
  • Last Name
  • Suffix
  • Username
  • User ID
  • Local System ID
  • Original Hire Date - This is set to 1/1/1901
  • Last Hire Date - This is set to 1/1/1901
  • Address Line 1
  • Address Line 2
  • City
  • State

When a user record is anonymized, the following information is deleted:

  • User Photo
  • Country
  • Email Address
  • Personal Email Address
  • Zip
  • Phone
  • Fax
  • Mobile Phone
  • Employee Relationships (e.g., Manager, Approver)
  • Custom Fields

For organizations using the fields below, the following information is also deleted:

  • User Type and Sub Type
  • Employment Status
  • Leave Type
  • Termination Reason
  • Termination Date
  • Termination Type
  • Eligible for Rehire
  • Rehired Employee
  • For Sensitive Personally Identifiable Information (SPII) fields present in the Data Load Wizard and reporting that do not display on the user record, the values are deleted.

When a user record is anonymized, the following information is not impacted:

  • Organizational Units (e.g., Division, Position, Grade)