informed-governance-project / NISINP

Incident Notification Platform by @NC3-LU
https://nisinp.readthedocs.io
GNU Affero General Public License v3.0
6 stars 3 forks source link

Durée de rétention des informations #202

Closed jerolomb closed 1 month ago

jerolomb commented 1 month ago

Req44 Put in place an automatic deletion of incident and logs. Duration should be configurable on installation in conf file.

Limitation de la durée de rétention des données à caractère personnel : 5 ans pour les notifications d'incidents 1 an pour les logs Nécessité d'implémenter un automatisme supprimant les notifications d'incidents et les logs plus anciens que ces durées.

jerolomb commented 1 month ago

Rules : Only closed incident are deleted when the incident notification date is lower than the actual date - the period in the conf file (e.g. 1825 days) Logs are delete when action_time is lower than the actual date - the period in the conf file (e.g. 365 days)