Enabling ‘Right to Erasure’ through Oracle HCM Cloud
GDPR and Right to Erasure:
GDPR stands for General Data Protection Regulation, which is a set of privacy regulations established by the European Union (EU) in 2018. The GDPR replaced the previous Data Protection Directive and is aimed at providing greater protection for personal data and the privacy rights of EU citizens.
The GDPR applies to all organizations that process the personal data of individuals located within the EU, regardless of where the organization is located. It gives individuals more control over their personal data, including the right to know what data is being collected and how it is being used, the right to have their data erased, and the right to object to certain types of data processing.
Under the GDPR, data erasure (also known as the “right to be forgotten”) is a fundamental right that individuals must request that their personal data be erased by an organization that is processing it. This means that the organization must delete all personal data it holds about the individual unless certain exceptions apply. Organizations are also required to inform other organizations that are processing the same personal data of the erasure request and to take reasonable steps to ensure that the data is erased by those organizations as well.
How Oracle Enables ‘Right to Erasure’
Oracle HCM Cloud includes several features that enable organizations to comply with the GDPR’s data erasure requirements.
1. Erasure Requests: Oracle HCM Cloud allows individuals to submit erasure requests directly to the organization. These requests can be processed within the system, with a clear audit trail that documents the request and the organization’s response.
2. Search for Personal Data: Oracle HCM Cloud includes a search feature that allows organizations to identify all personal data associated with an individual. This makes it easier to locate and delete personal data in response to an erasure request.
3. Data Retention Policies: Oracle HCM Cloud includes configurable data retention policies that can be set to automatically delete personal data after a specified period. This ensures that personal data is not retained for longer than necessary, which can help organizations comply with GDPR requirements.
4. Deletion Processes: Oracle HCM Cloud includes a deletion process that enables organizations to delete personal data from the system. This process is designed to ensure that data is permanently deleted and cannot be recovered.
5. Data Backup: Oracle HCM Cloud includes data backup and recovery capabilities that ensure that data can be recovered in the event of a system failure. However, these backups are designed to comply with GDPR requirements, such as ensuring that personal data is not retained for longer than necessary.
Overall, these features enable organizations to comply with GDPR requirements, including the right to erasure. However, it’s important to note that compliance with the GDPR is a shared responsibility between the organization and the cloud provider, and organizations should work closely with Oracle to ensure that their data protection measures are appropriate for their specific needs and use cases.
Steps for Employee/Candidate Obfuscation
References:
http://www.oracle.com/us/products/applications/gdpr-and-oracle-cloud-apps-4124561.pdf
https://www.oracle.com/uk/applications/gdpr/
MOS: Disposal of Employee Data in Oracle Fusion HCM (Doc ID 2216828.1)
MOS: All White Papers for Fusion Applications HCM (Doc ID 1504483.1)
MOS: Disposal of Person Data (Doc ID 2597475.1)
About the Author
Aman Sinha is a Senior Consultant working in the Oracle HCM Cloud domain. With an experience of over eight years, Aman has worked in a myriad of industries helping them to streamline their HR processes. A Consultant by day and fitness enthusiast by night, Aman also likes to read, watch, and learn daily. You can find Aman on LinkedIn.
