Domino Data Lab can assist customers in their obligations as data controllers under GDPR. This topic covers how to submit requests to Domino, and the information required from the customer to process the request. Because Domino does not systematically access the contents of files, uploaded requests must either reference specific users or specific files.
-
User Deletion - Domino can purge personal data about the name, email address and IP address of users of Domino, if required. To process a request, you must provide:
-
The user account name
-
A substitute user to inherit any owned projects and files
-
-
File versions request - Domino can provide the hash of all files in a version chain, and optionally access to those files. To process a request, you must provide a text file with the username, project name, and file path. The file must be in this format:
username/file_path_1/file_name.csv. -
List of projects referencing a file - Domino can provide the list of all projects referencing a specific file version in Domino. This is useful to identify potential impacts of changing a source file or version. To process a request, you must provide a text file with the username, project name, and file path. The file must be in this format:
username/file_path_1/file_name.csv. -
File deletion or substitution request - To process a request, you must provide:
-
A text file with the username, project name, and file path needing deletion or substitution. The file must be in this format:
username/file_path_1/file_name.csv. -
A text file with the username, project name, and file path to substitute, if applicable. The file must be in this format:
username/file_path_1/file_name.csv.
-
After any GDPR request, Domino provides you evidence of the actions carried out, but can no longer access the data in the system.
Most customers do not have to have data deleted or returned through the course of doing business. If you have to, for GDPR or other reasons, this can impact your history for reproducibility or auditability.
Domino does not accept responsibility for identifying derived data from files, nor ensuring the stability of projects or other work referencing a user or file altered in a request.