Making SW360 GDPR compliant

eclipse-sw360 / sw360

SW360 project

https://www.eclipse.org/sw360/

Other

122 stars 98 forks source link

Open arunazhakesan opened 2 years ago

arunazhakesan commented 2 years ago

To comply with the GDPR regulations, we need to make further improvements in SW360 user management.
A process needs to be in place to delete Users who are not using SW360 or have left the organization.
Ex-user data has to be anonymized in all places it appears, like projects, components, and so on.
This anonymized data should be non-clickable.

afsahsyeda commented 1 year ago

Currently, we are not able to delete or deactivate a User on CouchDB effectively.
On anonymising the user fields in projects, components etc getting this error in logs:
It will also the affect the SVM Sync for that project. Projects with Users having invalid external identifiers will be filtered out from the Sync.

arunazhakesan commented 1 year ago

@ag4ums we need to discuss this topic on priority and figure out how can we manage the user information in a better way.