[wp-trac] [WordPress Trac] #43767: Auto Delete Users after a period of time

[WordPress Trac]

#43767: Auto Delete Users after a period of time
-------------------------+------------------------------
 Reporter:  David 279    |       Owner:  (none)
     Type:  enhancement  |      Status:  assigned
 Priority:  normal       |   Milestone:  Awaiting Review
Component:  General      |     Version:
 Severity:  normal       |  Resolution:
 Keywords:  gdpr         |     Focuses:
-------------------------+------------------------------

Comment (by TZ Media):

 As discussed on slack, here are my thoughts on how this should be applied
 to different types of user data:

 - Transactional data: There are some legal requirements regarding how long
 transactional data must be kept. After this period, such data should be
 deleted ASAP. For data where no legal requirements exist, a period should
 be stated in the privacy notice, and the data should be deleted ASAP after
 this period ends.
 - Tracking data: Should be kept only for a certain time, and then deleted
 or at least anonymized, if it is used for statistics afterwards.
 - Data used only for statistics should be anonymized from the beginning if
 possible. I don't believe that there is any law requiring anonymized data
 to be deleted after a specific time.
 - User generated content: Is intended to be published "'till the usiverse
 explodes", if not otherwise stated by the user or terms of use. At least
 this is the default functionality in WordPress. We should not delete or
 anonymize this as long as the user does not ask us to do so, or the
 content itself violates terms of use or law, in which case we'll edit it
 or take it down manually. Also we should not block user access to the
 content in any way.
 - User accounts: If there is only transactional data connected to the
 account, it might be deleted or closed after a certain amount of time. If
 user generated content is linked to the account, we must keep it open to
 allow the user to access his content.

 Also, we should make all deletion periods configurable, as legal
 requirements or terms of use may widely differ.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/43767#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform