SOP: Personal Data Request - Deletion
This SOP covers how the Rocky Enterprise Software Foundation (RESF) and Rocky Linux Infrastructure Team handles GDRP (General Data Protection Regulation) data delete requests. It contains information about how System Administrators will use Ansible and other tooling to respond to delete requests.
|Owner||Infrastructure Team & Identity Management Team|
Responding to a Deletion Request¶
This section covers how a system administrator will use our
adhoc-ipauser-disable-pdr.yml playbook to respond to a delete request.
If a request has been received via email, perform the following steps:
- If request was received by email: Open a ticket at the bug tracker under the
Account Servicesproduct (Click the drop down in the top right corner, click "Account Services", select "Report Issue") a. Set category to
Account Requests - Personal Data Requestb. Assign to yourself if possible c. Summary should be set:
PDR - Email Delete Request for <USER/EMAIL>d. Description should be set to the snippet
PDR Request - Remove Personal Informationor copied directly from the email if the template was followed. e. Use the ID for the ansible playbook
- On the ansible host, run the necessary ansible playbook:
ansible-playbook -i inventories/production/hosts.ini playbooks/adhoc-ipauser-disable-pdr.yml --extra-vars='ipa_user=<USER> ticket_id=BT<TICKET>'
- Leave a comment on the issue that the disable request was performed.
- Email the affected user:
Hello. We have reviewed your account request and have performed the requested changes. The ticket <ID> has been closed and set to private. Please note that some public content such as mailing lists cannot be deleted since some information is meant to serve the RESF legitimate business interests, the public interest, and the interest of the open source community. Thank you, please let us know if you have any further questions.