This feature is located within the Data Retention within the Configuration tool.

Users with Can Change Data Retention Policy permission are able to manage the data retention settings.

Data Retention Policy

In addition to per-field retention data retention settings, Biosite also provides more generalised data retention settings.

As standard configuration, no data retention settings are configured causing Biosite to keep all data indefinitely.

It is recommended to review these data retention settings in accordance with your own data processing needs.

These data retention settings apply to the Biosite portal and will automatically synchronise down to Biosite server on-premise.

The configured data retention policy is applied overnight.

Delete operatives

When enabled, the Delete operatives setting will automatically delete all operatives who have not been active for the specified retention period.

This retention period is configured in years.

When the configured data retention period is reached for an operative, all data associated with operative will be deleted from the Biosite portal. This includes all personal data, all biometric data, all access event data, user accounts etc.

Once deleted, this operative will not appear in any historical reporting.

It is recommended that you choose a retention period setting beyond which you will no longer have a legitimate need to access operative data.

Delete incomplete operatives

When enabled, the Delete incomplete operatives setting will automatically delete all operatives who meet the following criteria after the configured retention period:

• Were created online, and
• Were created, or last logged in, outside of the configured retention period, and
• Are not an organisation administrator or portal administrator, and
• Have not completed all configured steps in the online induction, and
• Do not have an online induction code, and
• Have never been enrolled on any site

This retention period is configured in weeks.

When the configured data retention period is reached for an operative, all data associated with operative will be deleted from the Biosite portal. This includes all personal data, user accounts etc.

Once deleted, this operative will not appear in any reporting, nor will they be able to login.

A new user account and operative profile will need to be created for the operative if necessary.

Delete fingerprints

When enabled, the Delete fingerprints setting will automatically delete fingerprint biometric data for all operatives who have not been active for the specified retention period.

This retention period is configured in months.

Enabling this setting can result in operatives enrolled at site losing access to site due to the deletion of the biometric data.

Delete audit records

When enabled, the Delete audit records setting will automatically delete all audit records older than the configured retention period.

This retention period is configured in days.

Audit records can cause personal data to be retained beyond other retention periods. It is recommended that a suitable value is chosen.