GDPR Compliance gives administrators a focused, user-centric tool for meeting data-subject requests under the General Data Protection Regulation and similar laws. Look up a user, review the personal data OptimiDoc holds on them, export it as a machine-readable file, and anonymise it on request. Every action here is manual and deliberate — OptimiDoc does not delete or anonymise personal data automatically on a retention timer.
Screenshot: GDPR Compliance view
Overview
OptimiDoc processes personal data as part of print, copy, and scan management: usernames, email addresses, card numbers, job titles, device-usage records, and authentication events. The GDPR Compliance page centres on a single data subject at a time. You search for a user; once one is selected, the page unlocks the export and anonymise actions and shows that user's print jobs and operations. This makes it straightforward to compile a data package or fulfil an erasure request for a specific individual.
GDPR Rights Supported
|
Right |
OptimiDoc capability |
|---|---|
|
Right of Access (Article 15) |
Export Data produces a complete file of the personal data held for the user. |
|
Right to Data Portability (Article 20) |
The export is a machine-readable JSON file. |
|
Right to Erasure (Article 17) |
Anonymise removes the user's personal identifiers while preserving aggregate accounting data. |
|
Right to Rectification (Article 16) |
Edit profile data on the Managing Users page. |
Accessing GDPR Compliance
-
Log in to the OptimiDoc web interface as an administrator.
-
Navigate to Diagnostics > GDPR Compliance in the left sidebar.
Finding a User
Use the Search User field at the top of the page to find the data subject by name or login. Selecting a user unlocks the Export Data and Anonymise buttons and populates the activity view below. Clear the selection (the × button) to switch to a different user; the activity tabs reset to the first page.
Reviewing a User's Activity
Once a user is selected, the Activity Log section shows two paginated tabs so you can see exactly what data exists before acting on it:
|
Tab |
Columns |
|---|---|
|
Print Jobs |
Date, Document, State, and Pages for each print job owned by the user. |
|
Operations |
Date, Type, Device, and Pages (with colour pages shown separately) for each copy/scan operation. |
Each tab header shows the total count, and both tabs page independently through the data server-side.
Exporting User Data
Click Export Data to download a JSON file named gdpr_export_<user>_<date>.json. The file contains the user's profile (name, surname, login, email, department, and last-updated timestamp) together with their complete print-job history and operations. This single file satisfies both the Right of Access and the Right to Data Portability.
Anonymising a User
Click Anonymise to fulfil an erasure request. After a confirmation dialog, OptimiDoc:
-
Deletes all stored credentials for the user — card numbers, logins, passwords, and email.
-
Replaces the identity with a non-identifying placeholder (the surname becomes GDPR and the given name becomes Anonymous NNN) and marks the account as deleted.
-
Anonymises the user's job records, so operational totals (page counts, device usage, cost) survive for reporting while the personal link is removed.
-
Generates a new anonymous login so historical records still reconcile against a valid account.
Anonymisation is irreversible. Once a user is anonymised, their personal data cannot be restored. Export the data first if a record of the request is required.
Data Retention
OptimiDoc does not run any automatic retention process — there is no scheduled job that deletes or anonymises personal data after a fixed period. Retention is enforced with the manual tools below, according to your organisation's policy:
|
Data |
How to control it |
Where |
|---|---|---|
|
Personal data for a specific user |
On-demand Anonymise |
This page |
|
Old job records (with copies and accounting) |
Clear Old Jobs |
|
|
Held print jobs (printed / unprinted) |
Hold-after-print and hold-unprinted periods |
|
|
System log files |
Automatic rotation by date |
Managed by the logging framework |
Audit Trail
OptimiDoc keeps logs that support GDPR accountability (Article 30, Records of Processing Activities):
-
The Audit Log records authentication, spooler, device-install, and user-import events.
-
The Activity Log records document operations with timestamps and user references.
-
System Logs hold the detailed server logs.
Recommendations
-
Respond promptly — GDPR requires responses to data-subject requests within 30 days.
-
Export before anonymising so you retain a record of what was provided.
-
Set retention deliberately — because nothing expires automatically, schedule regular Clear Old Jobs runs and set the shortest print hold periods that meet your needs.
-
Consult your Data Protection Officer when defining retention and erasure procedures.
Related articles