...
| Requirement | Status | Use case |
|---|
| Optionally disable capture of "Source" in record details and version histories | | Supervisors and administrators must be unable to associate a particular staff member with a particular action in FOLIO. |
| Audit trail must be configurable | | Libraries not subject to GDPR should have the option of associating specific staff with specific actions |
| Disabled Source must not be retained anywhere in the system | | System administrators must not be able to reconnect hidden or masked user information to particular actions in FOLIO |
| Deleted/disassociated staff member should leave no identifiable artifacts in the system | | Right to be forgotten requires all identifying information be purged from the system on demand. |
Questions
Is it OK to mask/hide or is the requirement not to collect?