Data Privacy

Content

Personal Information Report

To comply with the General Data Protection Regulation (GDPR), LabVantage provides the following options:

•	Remove or anonymize personal data about a User, Subject or Contact when requested.
•	Generate and provide a Report to a User, Contact, or Subject for whom data has been collected. This report is sent to the User in a format that is concise, transparent, intelligible, easily accessible, using clear and plain language.

Anonymize permanently removes (or anonymizes) private User data.

From the Privacy Menu, on the User, Contact, or Subject List pages click "Anonymize".

A series of Anonymize SDI dialogs open.

First decide whether or not to erase the Audit History.	Confirm that this action does not violate any regulatory requirements.	Confirm your decision to proceed.

If you choose to erase all Audit History, a new single Audit record indicates that the Audit trail has been removed for fields with personally identifiable information.

You are required to provide your eSignature. When complete, a success message displays.

The User's private information is removed:

Before Anonymize		After Anonymize

The following information is Anonymized (removed entirely) for the User record:

•	The Description field is replaced with "Name removed for privacy".
•	Email address
•	Initials
•	Attachment for profile picture
•	Matching Contacts (when connected through the SDIAddress or Contact)
•	Option to remove the values (set to null) from the Audit trail for affected fields.

NOTE:

The system User id can not be removed, you (as the controller) should consider reporting this to the requesting LIMS User.

Using the same process (as for the User record) navigate to Lab Admin → Certifications & Resources → Contacts.

After clicking "Anonymize", and moving through the dialog box and eSignature, the Contact record is Anonymized as follows:

Before Anonymize		After Anonymize

		Fields that have been Anonymized are listed in the Notes field.

Using the same process (as for the User record) navigate to LIMS → Biobanking → Subjects.

After clicking "Anonymize", and moving through the dialog box and eSignature, the Subject record is Anonymized as follows:

Before Anonymize		After Anonymize

		The Subject Description field is replaced with the Subject Id. Fields that have been Anonymized are listed in the Notes field.

In order to Anonymize personal information Users require the Security module and the Administrator, Lab Manager, or SMS Admin Roles.

User, Contact and Subject Personal Data Reports can be generated from the respective list pages.

From the Privacy menu click "Personal Info. Report". The report is generated in HTML.

The Personal Info. Report opens:

Choose to Save the report as a PDF, or in HTML format.

Following is an example of the User Personal Information Report.