To respect some regulatory constraints, for instance GDPR, personally identifying data should be anonymized after a period of time.
For instance, for some disease, you need to anonymize contacts after 30 days, while you need to anonymize cases after 90 days (or even never).
Go.Data should allow to configure per outbreak the anonymization policy:
- Number of days before anonymization for contacts (Using
0 in that field would mean "never anonymize")
- Clear contact questionnaires (Yes / No)
- Number of days before anonymization for cases (Using
0 in that field would mean "never anonymize")
- Clear case questionnaires (Yes / No)
- Clear lab result questionnaires (Yes / No)
- Clear case follow-up questionnaires (Yes / No)
- Clear contact follow-up questionnaires (Yes / No)
- Clear event questionnaires (Yes / No)
Additionally, we should allow like in the 'fields' tab to select which data should be anonymized automatically using a checkbox next to each field.
Finally, in order to know if the data was present initially, perhaps instead of clearing the fields (that could be configured as required), we could replace their content with a specific character like ⛌? (or any other distinct character that is unlikely to be found in the real data)
A batch could be run everyday using cron to check of the anonymization needs.