Questions around Proforma and GDPR (or other data retention laws)

[SS]

Assumptions

• we need to collect 'necessary personal data' and must delete that data once it is no longer required.
• collecting the data directly into a Jira issue would mean we have to delete the whole issue, since old field values are retained in the issue history (is there a way around this limitation?).
• our fallback would be to use attachments, which can be deleted with an Automation rule. But a proforma option is more elegant.
• we are using data-center

1. If we delete a populated proforma form from an issue, (assuming that none of the form fields pushed data into linked Jira fields) does the database retain any information from the form?

2. Is there a way to automatically delete attached forms from Jira issues?
I can't find an API function for this, and they don't include an Automation action, but maybe the community knows some magic tricks.
There is a manual delete option, but to ensure compliance, we would want to automate the deletion (XX days after resolution).

[Marc -Devoteam-]

Hi @SS 

Unfortunate for DC there is no other option then manual on issues.

I don't expect that there will be any functional update on DC for this, as DC is being phased out.

There is an open feature request for this, see JSDSERVER-15847 

[Germán Morales]

Hi @SS , taking your two points in order.

• On whether deletion leaves a trace: Atlassian's own documentation doesn't confirm one way or the other whether the underlying form record is fully purged from the database or retained in some form. For something this compliance sensitive, that's worth getting in writing from Atlassian Support rather than assuming either way.
• On automating the deletion: there's no native Automation action for it, but Atlassian documents a workaround for exactly this: an Automation rule using Send Web Request to call the Forms REST API, GET the list of forms on the issue, then DELETE each one by ID. Trigger it on a scheduled rule counting days since resolution. It exists specifically because the native action is still an open, unresolved request.

[SS]

Thanks for trying, but that API doc is for Cloud, we are still on DC for a few years more at least.

In the DC API, I cannot find a delete function at all.

Given that the linked CR for cloud functionality is nearly 4 years old, I think it unlikely that they will add the functionality to DC proforma.