16 Mar 2023 04:41 AM - last edited on 17 Mar 2023 12:34 AM by MaciejNeumann
I need to know experiences related to the data DT may gather, including logs from labs instrumental, and how industry specific regulation may affect. Does anybody have experience with such a request?
Hello and good day,
You will have at some point read the following Dynatrace link regarding privacy settings:
However, this documentation may not go far enough or answer all your concerns regarding regulatory obligations.. The following needs to be considered and I recommend you review your company compliance documentation.
Retention - how long you store your data
(35 days with v1/v2 logging and tracing, more with Grail)
Location - where you are storing your data
(Dynatrace Cloud, or managed, you need to know where your cloud is hosting YOUR data)
Sensitivity - PII, PHI, GDPR..the list goes on.
Be careful here, some data according to local/regional laws etc might not allow data to be stored out of country or continent. In europe its popular, now we are seeing some US States implement similar.
Handling - scramping/masking PII etc
There are some features that help to mask certain field and attributes. Other logging./data vendors have the same features.
Again worth checking is there are clauses that mention data extraction. Where a "someone" might request x data for x days. Make sure you know how to do this.
Your compliance document will be needed here.