Update Data Protection for certain Data Fields [5]

[Candice-Louw]

Problem Description

In order to be inline with data protection regulations in Luxembourg, certain data fields have to be updated. Some are applicable to SORMAS overall, while others are applicable only to Luxembourg (see details below).

Proposed Change

Tabs from the data dictionary:

---

Person

---

Current:

Field ID	Field	Type	Data protection
Person.birthdateMM	birthdateMM	Number	-

Proposed (for all servers and instances):

Field ID	Field	Type	Data protection
Person.birthdateMM	birthdateMM	Number	Personal

(Apply to all servers).

---

Location

---

Current:

Field ID	Field	Type	Data protection
Location.city	city	Text	personal

Proposed (only for Luxembourg instances):

Field ID	Field	Type	Data protection
Location.city	city	Text	-

(Apply removal of data protection restrictions for this field, but only if the server locale is set to Luxembourg)

---

Case

---

Current:

Field ID	Field	Type	Data protection
CaseData.healthConditions	healthConditions	HealthConditions	-
CaseData.postpartum	postpartum	YesNoUnknown	-
CaseData.trimester	trimester	Trimester	-

Proposed (for all servers and instances):

Field ID	Field	Type	Data protection
CaseData.healthConditions	healthConditions	HealthConditions	sensitive
CaseData.postpartum	postpartum	YesNoUnknown	sensitive
CaseData.trimester	trimester	Trimester	sensitive

(Apply to all servers).

---

Task

---

Current:

Field ID	Field	Type	Data protection
Task.creatorComment	creatorComment	Text	-
Task.assigneeReply	assigneeReply	Text	-

Proposed (for all servers and instances):

Field ID	Field	Type	Data protection
Task.creatorComment	creatorComment	Text	- : Add GDPR notice (pop-up)
Task.assigneeReply	assigneeReply	Text	- : Add GDPR notice (pop-up)

(Apply to all servers).

---

Event

---

Current:

Field ID	Field	Type	Data protection
Event.srcFirstName	scrFirstName	Text	-
Event.srcLastName	scrLastName	Text	-
Event.srcTelNo	scrTelNo	Text	-
Event.srcEmail	scrEmail	Text	-

Proposed (for all servers and instances):

Field ID	Field	Type	Data protection
Event.srcFirstName	scrFirstName	Text	sensitive
Event.srcLastName	scrLastName	Text	sensitive
Event.srcTelNo	scrTelNo	Text	sensitive
Event.srcEmail	scrEmail	Text	sensitive

(Apply to all servers).

---

Action

---

Current:

Field ID	Field	Type	Data protection
Action.description	description	Text	-

Proposed (for all servers and instances):

Field ID	Field	Type	Data protection
Action.description	description	Text	- : Add GDPR notice (pop-up)
Action.description	Comments on execution	Text	- : Add GDPR notice (pop-up)

(Apply to all servers).

---

Added Value/Benefit

Enhanced data protection and compliance.

Acceptance Criteria

• All fields (listed above) have new data protection attributes applied.

Implementation Details

No response

Mockups

No response

Additional Information

No response