Deleting call logs

[RedNinjaAlex10]

Hey there!

My business has had a data removal request under GDPR. I'm trying to delete all logs of this person's phone number from our system, but am having issues.

When I go to recordings and look up the number, I can see recordings between the number I'm looking for and a member that no longer has an account on our system. When I right click on any recording with someone who does not have an account anymore I have no delete option. I don't think it has anything to do with the fact that the recordings are old enough that 3CX no longer stores them, but if I'm wrong please do say.

Another issue I'm having is I can't seem to delete their number from our call logs. When I go to Admin > Reports > Call logs I'm not able to delete logs.

So, is there a way I can remove logs of numbers from my system to comply with legal requests?

Any help is appreciated!

 

[Kevin Attard Compagno]

One possibility would be to simply purge the call logs (Admin -> System -> Maintenance) if you have a hard requirement.

 

[RedNinjaAlex10]

One possibility would be to simply purge the call logs (Admin -> System -> Maintenance) if you have a hard requirement.

Thanks for your reply Kevin!

Due to the fact I'm using the free cloud hosted version of 3CX, I don't think I have as many admin options as other users who self-host. I've attached a screenshot of my menu options under admin.

 

[destn]

If the phone number belongs to the company (e.g., a main office line or a specific desk extension), then the number itself isn't the "personal data" of the requester. The recordings are certainly personal data. You need to make it a practice to reassign the extension to an admin email address first, otherwise as you've noticed you'll get locked out of deleting a ghost account that isn't attached to anything. GDPR requires your best effort to conform to the request.

You deleting their name from the number works, but now you need to document what else you are able to remove yourself and what you aren't. GDPR doesn't require you do to the impossible, just make sure what is there isn't identifiable or accessible to those who shouldn't have access. In any case, I think smb has a 1 year log/recording retention? So they will age out eventually. Just document everything. If you're terrified for some reason, nuke that 3cx instance and start a new one -I wouldn't. Bottom line once again, if you've already removed the person, you've already obfuscated the original user, that's proportionate.

You can create a "new" user and manually type in the old extension number. Then go through and delete the recordings.

Thanks for your reply Kevin!

Due to the fact I'm using the free cloud hosted version of 3CX, I don't think I have as many admin options as other users who self-host. I've attached a screenshot of my menu options under admin.