Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Note

This content is only valid for DAS 3.2.0.

The General Data Protection Regulation (GDPR) is a new legal framework formalized by the European Union (EU) in 2016. This regulation comes into effect from 28, May 2018, and can affect any organization that processes Personally Identifiable Information (PII) of individuals who live in Europe. Organizations that fail to demonstrate GDPR compliance are subjected to financial penalties. For more information about GDPR, see the WSO2 - GDPR page 

Info
titleDo you want to learn more about GDPR?

If you are new to GDPR, we recommend that you take a look at our tutorial series on Creating a Winning GDPR Strategy.

For more resources on GDPR, see the white papers, case studies, solution briefs, webinars, and talks published on our WSO2 GDPR homepage. You can also find the original GDPR legal text here.

The Forget-me tool packed with DAS enables you to hide any PII (Personally Identifiable Information) sent to the product to be processed as well as remove references to deleted user IDs. See the following sections for details about the GDPR-compliancy of WSO2 DAS.

...

  • Stream Name: The name of the stream.
  • Attributes: The list of attributes that contain PII.
  • id: The ID attribute that needs to be replaced with the value of pseudonym argument when executing the tool.

Step 2: Configure the config.json file

In order to identify the streams and the stream attributes with PII, you need to create this file with definitions of the relevant streams and each attribute that contains PII (Personally Identifiable Information). This file must be placed in the  <DAS_HOME>/repository/components/tools/identity-anonymization-tool-x.x.x/conf  directory. 

The analytics-streams processor needs to be added to the configuration file of the Forget-Me tool as shown on the sample below.

...

ProcessorLocation
log-file <DAS_HOME>/repository/logs directory is the default location for logs.
analytics-streamsInformation persisted for the streams you specified in the

<DAS_HOME>/repository/components/tools/identity-anonymization-tool-x.x.x/conf/streams/streams.json file are removed from the persisted streams in the event store. For more information about persistence of data, see Configuring Data Persistence.



Step 3: Execute the Forget-me tool

To execute the Forget-me tool, issue the following command pointing to the <DAS_HOME> directory.

forget-me -U <USERNAME> -d <CONF_DIR> -carbon <DAS_HOME>

...