Skip to content

Conversation

@ks129
Copy link

@ks129 ks129 commented Sep 23, 2024

Questions Answers
Description? Added customer ID to the customer data column in the Customer Activity Log (if it is not 0). Implemented anonymization of logs in case of GDPR data deletion. Removed customer ID from erasure request (to avoid connecting customer name with previous account ID and records). The name should be retained in logs for compliance proof and for detecting excess requests.
Type? bug fix
BC breaks? no
Deprecations? no
Fixed ticket? Fixes PrestaShop/PrestaShop#34265 , Fixes PrestaShop/PrestaShop#34266
Sponsor company -
How to test? 1. Create a new customer account. 2. Request personal data (one or a few times) from the user settings. 3. Check GDPR logs - customer ID should be shown. 4. Delete user data. 5. Recheck GDPR logs - old records shouldn't contain name and the erasure record shouldn't contain customer ID.

@ps-jarvis
Copy link

Hello @ks129!

This is your first pull request on psgdpr repository of the PrestaShop project.

Thank you, and welcome to this Open Source community!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Ready for review

Development

Successfully merging this pull request may close these issues.

ID number is not present in the customer activity list [GDPR] The data on Customer Activity List is not anonymized after data deletion

2 participants