User deletion after extended inactivity period

[codyx]

Is your feature request related to a problem? Please describe. Conforming to GDPR, we should be able to configure a time limit for a user to be deleted after an extended period of inactivity.

Describe the solution you'd like In the Administration dashboard, we'd like to see a configurable box where we could set a time limit (in days) before running a user deletion due to inactivity.

Describe alternatives you've considered GDPR actions have been taken on Rocket.Chat since 0.66+ version, however we think not only messages should be deleted but also users: everything is data.

Additional context Source: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rules-business-and-organisations/principles-gdpr/how-long-can-data-be-kept-and-it-necessary-update-it_en

[codyx]

I'm actually working on it.

[Ranapalaa]

Nice. We are eager to have it !

[localguru]

One problem with deleting users is that all messages written by these users are also deleted. This leads to incomplete discussion processes. So there should be the option to delete users including all messages or only user accounts and keeping messages.

Basically, however, I also see the need to be able to automatically delete users or messages in channels after a certain period of time in order to comply with data protection regulations.

See also https://github.com/RocketChat/Rocket.Chat/issues/6186

[kaiiiiiiiii]

@localguru You can already define what happens with messages when you delete a user.

Administration -> Message -> Message Erasure Type

[codyx]

@localguru Indeed it could lead to imcomplete discussion processes but it is required to be GDPR compliant.