Data Privacy vs. Activity Log

[Stefan Draber]

Hey community,

we're currently evaluating Opsgenie for alerting and On-Call-management purposes.

Although we're pretty excited about all the features and possibilities, we stumbled upon the activity log and its lack of options to control data privacy.

We identified two main concerns so far:

1. alerted phone numbers are visible for everybody (with access to the alert). For people being on-call with their private phone that's a no-go. They will rather choose another contact method than publishing their private number in a business context.
2. our works council is concerned that the information given in the activity log can be used to monitor individual performance in an illegal way (strongly regulated in Germany), as you can see exactly when a call has been answered or when a mail has been opened(!)

Both issues could easily be solved technically:

1. with a checkbox in the notifcation channel configuration dialogue
2. control access to activity logs based on user-role

Do you have similar concerns in your companies? How do you deal with it?

I've created a feature request for this issue, which you can support/upvote if you're facing similar struggles: https://jira.atlassian.com/browse/OPSGENIE-258

Best regards,

Stefan