Exercised right of access (RGPD)

[David Martínez López]

Hello everybody!

A former colleague is requesting the exercised right of access (RGPD) that I may have in JIRA. How could I see that information and how could it be deleted?

Thank you!

[Alex Koxaras _Relational_ · Accepted solution]

Hi @David Martínez López 

RGPD = GDPR?

[Alex Koxaras _Relational_]

If that is the case, then I would suggest that he deletes his Atlassian account:

https://support.atlassian.com/atlassian-account/docs/delete-your-atlassian-account/

The above article states:

We’ll delete your personal data from Atlassian account services within 30 days, except in a few cases where required for legitimate business or legal purposes. Some examples include:

• Information related to purchases, which we’re required to keep for financial reporting.

• Records showing that we deleted your account, which we may need to provide to regulators.

• Data that’s part of an active lawsuit, which we’re required to keep by law.

You have the right to submit complaints to the supervisory authority in your country.

[David Martínez López]

Thank you very much for your reply @Alex Koxaras _Relational_ 

The issue is that the data you want to delete, are those in the internal instance of JIRA, not in the Atlassian account, that is, the data that JIRA associates to the opening of user incidents and the data imported from the AD.

Thank you!

[Nic Brough -Adaptavist-]

There's no easy way to do this, you're going to need to manually search for any personal data that they might have entered into Jira and delete or anonymoise that, after they've deleted their Atlassian account.  

[Alex Koxaras _Relational_]

@David Martínez López I know, at least from the Greek law, that any employee that creates something inside a working environment for their work, is consider company property. With that said, I would first search and consult your DPO about what data you should erase.