Personal Data Rights in HR Service Delivery
HR customers can enable personal data protection for their employees and alumni by implementing General Data Protection Regulation (GDPR) rules as a result becoming a GDPR compliant organization.
HR Service Delivery offers two HR services to conform with Right to be Informed (RTBI) and Right to be Forgotten (RTBF) GDPR requirements:
- Request Personal Information Report
- Erasure of Personal Data
Right to be Informed (RTBI)
RTBI in HR Service Delivery include:
- Classifying the Personally identifiable information (PII) data.
- Approving hierarchy for the report generation. For more information, see Generate Personally Identifiable Information (PII) report.
- Requesting personal information report by an employee or alumni. For more information, see Request personal information report.
- Restricting the service access to the agents in the HR data privacy group.
Right to be Forgotten (RTBF)
RTBF in HR Service Delivery include:
- Creating erasure request. For more information, see Request erasure of personal data.
- Reviewing the erasure request and checking for eligibility.
- Carrying out the deletion.
- Restricting the service to the agents in the HR data privacy group and the HR data privacy compliance group for approvals.
Customers can choose to anonymize the employees personal data over deletion. For more information, see Data anonymization.
The ServiceNow platform offers other tools like Table cleaner, Archival rules, and Destroy rules, to support minimal data retention by removing outdated data. For more information, see Exploring Data Management. For enhanced data privacy, you can explore Anonymization and Field Encryption. For more info, see Field Encryption.