GDPR, Anonymization of Customer Data

In accordance with the directives for GDPRClosed The General Data Protection Regulation is a regulation in EU law on data protection and privacy in European Union and European Economic Area., individual customers' data privacy has to be protected. Data Governance is the process that classifies sensitive data and anonymizes it on request for data protection regulations.

NOTE  
Based on our experience, FintechOS selected which information to anonymize. The financial institution can validate or add/remove attributes from the anonymization process within Innovation Studio.

There are two scenarios when the data can be anonymized:

  1. Automatically

    After 5 years (not counting the year of closure) the contractual relationship between a customer and a bank has ended. Certain data is automatically anonymized by the system: the scheduled job named FTOS_IB_CreateAnonymizationRequests runs a server-side script.

  2. Manually

    Upon user request, the bank can manually select a customer for which the data to be anonymized.

The types of information that are anonymized are username and password and:

   

The anonymization is done based on a rule. Both requests manually and automatically, anonymize the data in the entity FTOS_IB_UserXCustomer that have the status Inactive. Manually, the bank representative searches for the user or customer or automatically, the system anonymizes all the records which meet the rule.

IMPORTANT!  
All the records in FTOS_IB_UserXCustomer, which will be anonymized, must be in the Inactive state first before anonymization.