General Data Protection Regulation (GDPR)

Since May 25th 2018, the EU have been enforcing the General Data Protection Regulation (GDPR) rules for all member states. With significant penalties for the leakage of personal data, organisations are required to carefully consider their compliance with the GDPR mandate. Amongst the requirements are a way in which to facilitate users’ Right to Access their stored data, as well as their Right to be Forgotten; to have said stored data permanently redacted.

PaperCut and GDPR

Building on our existing security features such as Digital Signatures and Watermarking, Secure Print Release and Authentication, PaperCut NG & MF give you two specific data related features to further assist with you being GDPR compliant.

In addition, PaperCut has authored a GDPR Compliance Guide, with practical advice on steps you can take to help make your print system GDPR compliant.

Download the PaperCut GDPR Compliance Guide - Updated 8th July 2020

How To Access and Remove Data

PaperCut NG and PaperCut MF 17.2 introduced functionality to summarise and export all data stored by the application concerning individual user accounts, as well as fully redact that data.

Right to Access

The following server-command can be used to generate a suite of CSV files, the contents of which constitute all data associated with a given user.

export-user-data-history <username> <savelocation>

… where <username> reflects the user’s system username, and <savelocation> reflects either a relative path or absolute path to store the files, with respect to the Application Server’s installation directory.

Right to be Forgotten

The following server-command can be used to remove all identifiable information associated with a given user.

delete-existing-user <username> permanently-redact-user-data

… where <username> reflects the user’s system username.

Also See

• Is GDPR Y2K all over again?
• Understanding GDPR (in under 3 minutes)
• Why businesses should still care about GDPR