Privacy Partner's Right to be Forgotten

privacy_partner_to_be_forgotten · OCA/data-protection

    Repository
    OCA/data-protection · module folder · Try on Runboat
    Module version
    1.0.0
    Category
    Data Protection
    Folder size
    0.1 MB
    License
    LGPL-3
    Application
    No
    Auto-installable
    No
    Website
    https://github.com/OCA/data-protection
    Last tracking update
    2026-08-07 09:06:34
    Authors
    Odoo Community Association (OCA), Cetmix
    Maintainers
    Odoo Community Association (OCA), Cetmix
    Committers
    Ricardoalso, Weblate, OCA-git-bot, oca-ci
    Odoo dependencies
    odoo/odoo:
    - contacts
    - base
    - mail
    - base_setup
    - web
    - bus
    - web_tour
    - html_editor
    Python dependencies
    None
    System dependencies
    None
    Required by
    None
    Description
    The module allows anonymizing contacts that represent natural persons (i.e., individuals) when they are no longer needed or when a data erasure request is received.

This module provides a method to anonymize all personally identifiable information (PII) from a `res.partner` record:
- Name (e.g., replaced with initials or a generic label) for individual contacts
- Email address
- Phone numbers
- Street and address fields
- Tax ID
- Citizen Identification
- Job position and title
- Internal Notes
- Attached images (e.g., avatar)

The anonymization preserves the partner's link to its parent company if applicable (e.g., for a B2B contact) but ensures that the individual is no longer identifiable through the remaining data or relationships.

Additionally, the module removes all chatter messages (`mail.message`) and attachments associated with the partner record, as these may contain personal information, such as communication history, internal notes, or file uploads. This ensures complete anonymization and supports full GDPR compliance.

If the partner is linked to one or more `res.users` records (e.g., as a portal user or employee), the module will anonymize these user records:
-  The user login and email are replaced with anonymized values, and the user is archived.

A log note is added to the partner record chatter to indicate the anonymization event, supporting traceability.

    Code Analysis ⓘ

    Views touched (1)
    XML IDNameModelTypeStatus
    view_partner_anonymize_wizard_form partner.anonymize.wizard.form partner.anonymize.wizard form New
    HTTP endpoints (0)

    No HTTP endpoints found for this module.

    Models touched (2)

    New fields (1)
    • partner_ids Many2many → res.partner
      readonly=True required=True args: 'res.partner'
    Public methods (2)
    • action_confirm(self)
      Confirm and process partner anonymization for multiple partners
    • default_get(self, fields_list)
      @api.model

    New fields (0)

    No new fields.

    Public methods (1)
    • anonymize_partner_data(self)
      Anonymize partner and all related data. Executes anonymization in the following steps: 1. Generates anonymized identifiers 2. Anonymizes related user accounts 3. Anonymizes partner record 4. Removes related messages 5. Removes related attachments 6. Logs the anonymization action Note: This operation is irreversible and removes all personal data traces.

    Loading…

    Loading…

    Status
    Open migration PR — not merged yet for this version
    CI status
    green — ready to merge
    Open since
    108 days ago
    Last activity
    108 days ago
    Repository
    OCA/data-protection
    Pull request
    [12.0][MIG] privacy_partner_to_be_forgotten (#93)