Comment on page
[ADR-0020] Form Builder data retention policy
Enforce a 3 months retention policy. Enable personal data safeguards.
- Status: accepted
- Deciders: Development, Product
Technical Story: We want to avoid storing supporters’ personal data into the websites’ databases. Instead data should be stored into relevant external systems (Hubspot, Salesforce, etc) where applicable.
Most of the Form types (as identified) are already integrating into external systems. But not all of them do (eg. Quiz). For the ones that don’t we need to identify what’s a reasonable policy for NRO admins to have the time to decide the extent of data they want to keep but also have the time to export them. But even for the forms that send data to other systems (eg. Petitions) we need a failsafe to make sure data is actually sent over before deletion.
At the same time we should aim for respecting GDPR requirements for the period of time these data remain on websites’ databases.
Enforce a 90 days retention policy. All submission entries will be automatically deleted after point. It would be up to NRO admins to export any submission data that are not synced to another external system if they wish to.
This is useful in cases where an NRO gets a request by a supporter to delete or export personal data.
Don’t store IP addresses on form submissions.
