Delete user's files to be GDPR compliant

I haven’t done much with files but I can think of two possible options:

  1. If you know the different data types your users can upload files to, can you not use merged search results to build a list of file URLs for deletion when the user deletes their account? You could then run an api workflow on that list to delete each file. So let’s say a user can upload multiple certificates to a Certificate data type, but they can also upload several audio files and images against Note records. The idea is to run an API workflow on a list that is of type text and is made up by merging search results of certificate URLs, Note audio URLs and Note image URLs. Your API workflow will take a text parameter which you would set as the URL for deletion in the delete uploaded file action.
  1. Every time a file is uploaded, add its filename to an ‘uploaded files’ list of texts field on the User’s record. Then when they delete their account, first run an API workflow on the uploaded files list.
2 Likes