Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Description • 11 years ago

We need a policy for deleting data for Input.

How long should we retain response email addresses?

How long should we retain responses?


After figuring out the policy, we should codify it somewhere (the fjord docs? wiki?) and write a cronjob to implement the policy.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 1 • 11 years ago

We should also run the policy by privacy folks.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 2 • 10 years ago

I sent an email to the advocacy list about what their requirements are for data retention. Will follow up here when there's a consensus.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 3 • 10 years ago

Moving this to 2014q2. Also, making this a P1 and taking it. This really needs to get figured out asap.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 4 • 10 years ago

Bumping this to 2014q2.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 5 • 10 years ago

Sent another email to the advocacy list to hash this out.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 6 • 10 years ago

We hashed this out on the advocacy list. The resulting Input data retention policy is as such:

1. We keep feedback data (feedback_response) forever, but only the last 6 months of data is available on the public dashboard.

2. We keep email addresses (feedback_responseemail) for 6 months and then delete them.

3. We keep context data (feedback_responsecontext) for 6 months.

4. We reserve the right to delete responses that contain hate speech and abuse.


What needs to happen is the following:

1. codify the data retention policy in a page on Input

2. add a link to the relevant places (site footer, feedback forms, etc) to our data retention policy page

3. write a cron job that deletes records in feedback_responseemail and feedback_responsecontext older than 6 months

4. change the code for the public dashboard to only show 6 months of data

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 7 • 10 years ago

Created the bugs for implementing the bits.

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 8 • 10 years ago

Scratch that 4th item in the policy--that's already covered in the Legal Disclaimers and Limitations document linked in the footer of Input:

https://www.mozilla.org/en-US/about/legal/

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 9 • 10 years ago

This is completed now. Marking as FIXED. Yay!

	Will Kahn-Greene [:willkg] ET needinfo? me Assignee
	Comment 10 • 10 years ago

Retro-actively making this 2 points. It took a while to figure out.