General Data Protection Regulation (GDPR) compliance

[rorosa]

Hi,

Are you going to develop anything to be compliance with GDPR? I mean a table with consent of each lead, contact in order to avoid to send emails to people with no consent.

Thanks!

[AlexAv]

Yes we did since 5.2.0 version. https://www.espocrm.com/documentatio.../data-privacy/
Read more on the blog about EspoCRM GDPR Compliance

[rorosa]

But if the administration requires a document with all personal data EspoCRM should be able to generate a document with all personal data of database.

[tanya]

You can get personal data only for specific record in it's view. You can not get all personal data in the system in one place

[rorosa]

But the main job of DPO (data protection officer) is to get a report with all personal data of any system.

[AlexAv]

Are you taking about Personal Data or related data?

[rorosa]

It is a report with all fields and data with personal data. It means the ones you talk in the documentation and also if a new field created by the user contains personal data this should be also in that report. So you have to create something to mark a new field saying it is containing data for GDPR.

[tanya]

In Entity Manager in your custom field you can find the option Is Personal Data. If you check it, this field will be included in that report.

[rorosa]

OK, great. But that report will be available or it is? Many thanks!

[tanya]

it is

[rorosa]

A DPO needs this report agregated. Get it one by one is crazy.

[olamborelle]

But if the administration requires a document with all personal data EspoCRM should be able to generate a document with all personal data of database.

Really? This sounds strange to me, that it should be so easy or even needed to generate "a print out" of all personal data. It sounds more probable that various people in the administration need to access various personal data.

Of course, A DPO should be able to report WHERE is WHAT data, but by a descriptive document, not a compilation of the data itself.

I would be genuinely interested to hear how/why the administration would need that..
Cheers,