General Data Protection Regulation
‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Personal data in CONNX can be found in two locations:
The CONNX Data Dictionary, under users.
Log files for CONNX, including the CONNX data server log files (cnxrun.log, cnxrms.log, cnxrdb.log, cnxdbms.log), mainframe logs in either sysprint or TDQ stdout on VSE, or the JDBC server log files (jdbcserver.log or jdbcserver64.log).
When a natural person leaves an organization, their personal data can be removed with the following steps:
1) Remove the user from all CONNX data dictionaries.
2) Delete all CONNX client and server log files as listed above.