Is there a way to delete some of the history from a Jira Service Management ticket (personal data)?

Joe Pakenham_cmlekz

Background: We are planning to expand our Service Desk to include services that will have to occasionally capture address details of our staff.

We've agreed that this should only be temporary so that the information is only kept for as long as necessary, following GDPR.

Our first thought was to auto-delete the field upon ticket closure, however this information would remain in the ticket history. 

We also thought about using attachments to contain the address details, The history would still show that an attachment had been deleted but not include the contents of the attachment. However, this isn't particularly user-friendly. 

Are there any other ways this could be done, preferably avoiding a marketplace addon?

Callum Carlile _Automation Consultants_

@Joe Pakenham What you could do is isolate the 'stuff only certain users should see' in a sub-task of the main request, e.g. staff address details, and then use an Issue Security Scheme for the sub-tasks to restrict the viewing access to only certain users. All of the data which is needing to be secure could then only be referenced in the sub-tasks.

You would need to create a copy of the service request workflow and assign this workflow to sub-tasks in a workflow scheme, and then on this cloned workflow you can set a Security Level on the Create transition. In the security scheme, you can add any of these following values to the security level, and you could use a combination of these to only make the sub-task visible to particular users:

Issue History is designed for audit and traceability, and there is no way to delete this without cloning the task. So keeping the more secure data in a separate task (a sub-task in this case) could be a way of separating the 'common' and 'private' data.

Hope this helps!