PII Management Options
Although there are current options for purging patron IDs from circ transactions, and deleting account transactions, there are some gaps with removing PII (personally identifiable information) we'd like to see addressed.
We'd like the option to purge patron IDs from non-circ transactions (incl. patron account history and record history). We'd also like the option to manage patron details on any other tables where history may be maintained after a patron record is deleted (e.g. Notification History, DeletedPatrons, DeletedPatronAccounts, kwmssg, and offline and InnReach process tables). It would also be ideal to have a plan for removing any CNV tables (from migrating to Polaris, or additional work by Clarivate staff) after a set period of time, as these may linger with patron data, and without oversight.
We'd like patron data limited in log files where it is included (e.g. SIP, PAPI, IIS). Lastly, as there can be considerable patron data in SimplyReports exports, we'd like to see options to purge reports files after a certain period of time (the settings exist on the Application Defaults page, but don't work).
