psgdpr icon indicating copy to clipboard operation
psgdpr copied to clipboard

Show customer ID and anonymize data in the Customer Activity Log

Open ks129 opened this issue 5 months ago • 1 comments

Questions Answers
Description? Added customer ID to the customer data column in the Customer Activity Log (if it is not 0). Implemented anonymization of logs in case of GDPR data deletion. Removed customer ID from erasure request (to avoid connecting customer name with previous account ID and records). The name should be retained in logs for compliance proof and for detecting excess requests.
Type? bug fix
BC breaks? no
Deprecations? no
Fixed ticket? Fixes PrestaShop/PrestaShop#34265 , Fixes PrestaShop/PrestaShop#34266
Sponsor company -
How to test? 1. Create a new customer account. 2. Request personal data (one or a few times) from the user settings. 3. Check GDPR logs - customer ID should be shown. 4. Delete user data. 5. Recheck GDPR logs - old records shouldn't contain name and the erasure record shouldn't contain customer ID.

ks129 avatar Sep 23 '24 10:09 ks129