GDPR: data retention after Contract termination

[matteo_rota]

Hello everybody,

I'm looking for an official Servicenow document that explains what is the data retention policy after contract termination.

Any suggestions?

Thanks

[Dr Atul G- LNG]

Hi @matteo_rota 

Generally, this has been mentioned in the contract or NDA. I recommend connecting with your SN account manager to get clarification on this information.

https://www.servicenow.com/community/itsm-forum/data-retention-period/m-p/784380

I think it is 45 days, but check with your SN Account manager.

[matteo_rota · Accepted solution]

Here below how I solve about the "Administrators reports" required by GDPR:

Increase retention to 35 DAYS

- To retain data in sys_user_login_history for more than 30 days, you can update the field "Age in seconds" of sys_auto_flush record of "sys_user_login_history" table (below link for reference)
- https://siadprod.service-now.com/sys_auto_flush.do?sys_id=65189cd0eb011110bd1e0c73a2522883

Make sys_user_login_history reportable

- All properties >> UI Properties >> "List of system tables (beginning with "sys_", comma separated), that are reportable. By default, system tables are not reportable"
- Add table sys_user_login_history to the list of reportable tables
- Save

Define a Report source based on sys_user_login_history (Privileged user = True AND Login Time = Last month)

Define a report on the Report source

Schedule a report to be sent by email every 1st of the month