CRM Data clean up in c.o
Need to spend some time organizing the data in c.o. as well as adopt better mgmt practices consistent with GDPR.
- Organize/clean up groups
- Dedupe contacts
- Remove spam contacts
From a data quality mgmt and privacy standpoint:
- Review/clarify the business processes that add/update data (need to be explicit for users)
- Include language in privacy policy about how we use, retain data, and how to request that it's removed
- Establish general rules around our data retention and mgmt
Activity
added status:doing label
mentioned in issue #130 (closed)
changed milestone to %CiviCRM Website Upgrade
Based on call with Martijn:
WRT to data clean up, from a GDPR point of view, for each point of data related to persons, we need to have a reason/record for collecting the data. Data should be assessed based on source, risk and reason.
Consider the life cycle of users where they join, become active, and then exit. We should have a policy where at the end of a life cycle + a grace period, the data should be deleted. "Active" users are such because they take an explicit action like opening an email, participating in a survey, updating their newsletter preferences, etc.
In the privacy statement, include our rules on how treat, store and manage data. Specific retention periods. If a user wants to be deleted/anonymized, email to specific address and process it within a month. Include latter language in outgoing emails. We need to explicitly communicate what we do with the data.
The process should focus on data quality, identifying what data is high value vs. that which isn't or no longer is (high value for the organization and its business processes). Some references:
Edited by josh
Cross-referencing this issue with notes for a revised privacy policy: marketing-admin#2 (closed).
Edited by nicolmentioned in issue #254 (closed)
added tech:civi label