Characteristics of open source tools

5. Data retention, minimisation, and deletion policies

In the context of GDPR, it is essential to store only the data that are necessary and to delete them when no longer needed. Tools should support the implementation of such policies.

What to check:

• Whether automatic deletion of outdated data can be defined
• Whether pseudonymisation or anonymisation is supported
• Whether visibility controls for sensitive data are available

Example: 

CKAN allows datasets to be marked as “private,” but mechanisms for deletion must be set up manually, which requires additional attention.