Configure sensitive data purge settings

By default, if the Sensitive Data feature is enabled, it destroys sensitive data for members with a Purged status. However, you can also choose to destroy sensitive data for members with other statuses (Unsubscribed, Undeliverable, Nonmember).

Note:

• This feature is available by request. If you are interested in enabling this feature, please contact your Customer Success Manager.
• The sensitive data purge settings apply to all communities across the application instance.
• Once sensitive data is purged, it is unrecoverable. Ensure that you thoroughly understand how sensitive data works and what constitutes sensitive data before changing these settings. For more information, see Sensitive data.

1. In the navigation bar, click Product Settings > Technical Config.
   
2. Scroll down to the Sensitive Data area.
3. Enter the Grace Period.
   The grace period begins after a member's status changes to an eligible purge status. When the grace period is exceeded, sensitive data destruction occurs. This built-in delay gives you time to review your community and undo undesired changes in member status. A longer grace period gives you a better chance of avoiding unintentional and permanent data loss. Typically, a value between 60 and 90 days is recommended.
   Note:

   • Admins cannot enter a Grace Period value lower than 30 days. If you need a grace period lower than that, please contact your Account Representative.
   • Numerical values containing decimals are not allowed.
4. Select the Statuses to Purge.

   Status	Description
   Purged	Purges sensitive data for members whose statuses have been set to Purged by Admins. For more information, see: Purge active members Purge non-participating members Historically, this is the default status that the Sensitive Data Purge feature has used to determine which members' data to purge. Selecting this option is recommended.
   Undeliverable	Purges sensitive data for members whose statuses have been set to Undeliverable by the application. A member is marked Undeliverable if email delivery fails frequently or a spam complaint was made. Selecting this status can be risky if you: Distribute ad hoc activities for which you upload recipient lists. Use system upload. If you purge an Undeliverable email address, the application will no longer send emails to that address. However, you can still accidentally send emails to a previously purged Undeliverable email address if the email is in a CSV upload. Always ensure that your recipient lists are clean and adhere to email deliverability best practices.
   Unsubscribed	Purges sensitive data for members who have requested removal and opted to leave the community. Selecting this status can be risky if you: Distribute ad hoc activities for which you upload recipient lists. Use system upload. If you purge an Unsubscribed email address, the application will no longer send emails to that address. However, you can still accidentally send emails to a previously purged Unsubscribed email address if the email is in a CSV upload. Always ensure that your uploads are clean and adhere to anti-spam legislation.
   Nonmember	Purges sensitive data for members whose statuses have been set to Nonmember by the application. A person is marked Nonmember when one of the following has occurred: The person is not a member of the Community. The person's email address and profile variables are in the system; however, the person has not been recruited yet. This can happen if you upload recipient lists for ad hoc activities. The person used a recruitment link to complete a recruitment survey. The person is marked as a Nonmember until they confirm their membership. Note: Do not select Nonmember if you plan to have a low Grace Period value. This can impact your ability to send reminders if an ad hoc activity or a recruitment survey remains open for a time span that exceeds the grace period. Once the grace period has elapsed, the original email addresses are destroyed and no more communications can be sent to the recipients for any reason.

5. When you are finished, click Save.
6. Click Confirm when prompted for confirmation.

Parent topic: Sensitive data