Oldest Moodle course areas and personal data will be destroyed
In the first phase of Moodle life cycle management the oldest course areas and personal data in Moodle are destroyed. During the second phase of Moodle life cycle management the policy for destroying course areas and personal data in Moodle systematically in future is being prepared and will be completed during the spring term 2025.
The General Data Protection Regulation (GDPR) sets detailed requirements for collecting, sharing and managing personal data. GDPR requires that personal data is kept in a form, from which the person registered can be identified only for the time that is needed to carry out the procedures data is collected for. Documentation or data that includes personal data and is kept for a specified period must be destroyed in a secure manner after deadline so that the data is not available for outsiders, and it cannot be used for the original purpose or return to be used (destroying). Personal data can be kept permanently only when it is regulated by law or by the decision of National Archives.
The systematic destroying of Moodle course areas and personal data also enables efficient and appropriate use of Moodle capacity and licenses. It also reduces the risks of data security leaks relative to registered persons (destroyed data cannot be leaked).
In the first phase of Moodle life cycle the following one-time destructions of Moodle course areas and personal data are carried out. Personal data cannot be maintained permanently in Moodle because there is no legislation or decision by National Archives saying so. There are also no grounds for keeping these oldest course areas or personal data yet for a fixed period.
- Moodle course areas, which have ended by 2020 August 1, are destroyed.
- Person’s user information in Moodle is destroyed if a person has not signed in Moodle after 2019 September 1. By destroying person’s user information, his/her assignments and possible gradings from all course areas he/she has participated are destroyed.
The data mentioned above is destroyed after 2025 March 1. The destruction is executed by digital services.
