GDPR with user personal data

[Myles Boyd]

We ask for users home address and personal phone number to be able to ship laptops, etc to them.

Our compliance team have flagged this as a GDPR red flag as the data is stored after we have no further use for it.

I can put the data into custom fields and, thru manual run automation, wipe the data when no longer required.  The issue is this data will still appear in the audit.

Is there any to prevent/hide or automatically remove the data from the issue audit history?

[Calvin · Accepted solution]

Might be worth checking out this "In Progress" ticket from Atlassian: https://jira.atlassian.com/browse/JRACLOUD-71685 

Regarding upcoming functionality to removing details like these.

Though it looks like part of this may be making it part of Atlassian Guard Premium based on the Atlassian response.

[marc -Collabello--Phase Locked- · Accepted solution]

The issue is not only audit data.  Also Atlassian keeps backups for disaster recovery, and these backups will also contain the personal data.