Remove the User's Personal Information

Owned by Kevin Pham (Deactivated)
Jul 24, 2019
2 min read

For our customers' GDPR compliance, we now provide a method (available upon request) to completely remove a user's PII (Personally Identifiable Information) from the database, while still keeping historical execution and audit data. Personal information that might be stored for a user may include the following:

  • Full name
  • Home Address
  • Email Address
  • Telephone Number

To remove users and their personal information from Zephyr, the administrator managing the users must first disable the users prior to deleting the user. The administrator deleting the user also needs access to the database storing the user information for Zephyr. Follow the below steps to remove any existing personal information/details of a user for the following databases:

MySQL Database

1. Run the first select query to fetch disabled users in the database.

select id from users where account_enabled=b'0';

2. Run the following update and add/replace the ids of the user as the parameters for 2nd query to update the information.

  • Ensure that you replace the <id comma separated if multiple ids> at the end of the update with the id of the actual user(s) you wish to remove.
update users set first_name=CONCAT('deleted.user',id), last_name=CONCAT('deleted.user',id), username=CONCAT(CONCAT('deleted.user',id),'.',CONCAT('deleted.user',id)), email=null, title=null,address1=null, address2=null, city=null, user_state=null, country=null, postal_code=null, loc=null, work_phone_number=null, mobile_phone_number=null, home_phone_number=null, website=null, picture=null, password_hint=null, status=null, login_name=CONCAT(CONCAT('deleted.user',id),'.',CONCAT('deleted.user',id)) where id in (<id comma separated if multiple ids>);

Oracle Database

1. Run the first select query to fetch disabled users in the database.

select id from users where account_enabled='0';

2. Run the following update and add/replace the ids of the user as the parameters for 2nd query to update the information.

  • Ensure that you replace the <id comma separated if multiple ids> at the end of the update with the id of the actual user(s) you wish to remove.
update users set first_name=CONCAT('deleted.user',id), last_name=CONCAT('deleted.user',id), username=CONCAT(CONCAT('deleted.user',id),CONCAT('.',CONCAT('deleted.user',id))), email=null, title=null, address1=null, address2=null, city=null, user_state=null, country=null, postal_code=null, loc=null, work_phone_number=null, mobile_phone_number=null, home_phone_number=null, website=null, picture=null, password_hint=null, status=null, login_name=CONCAT(CONCAT('deleted.user',id),CONCAT('.',CONCAT('deleted.user',id))) where id in (<id comma separated if multiple ids>);commit;

SQLServer Database

1. Run the first select query to fetch disabled users in the database.

select id from users where account_enabled='0';

2. Run the following update and add/replace the ids of the user as the parameters for 2nd query to update the information.

  • Ensure that you replace the <id comma separated if multiple ids> at the end of the update with the id of the actual user(s) you wish to remove.
update users set first_name=CONCAT('deleted.user',id), last_name=CONCAT('deleted.user',id), username=CONCAT(CONCAT('deleted.user',id),'.',CONCAT('deleted.user',id)), email=null, title=null, address1=null, address2=null, city=null, user_state=null, country=null, postal_code=null, loc=null, work_phone_number=null, mobile_phone_number=null, home_phone_number=null, website=null, picture=null, password_hint=null, status=null, login_name=CONCAT(CONCAT('deleted.user',id),'.',CONCAT('deleted.user',id)) where id in (<id comma separated if multiple ids>);