GDPR Compliance Reference for macOS Security

Jamf Protect Documentation

Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Jamf is committed to complying with the EU General Data Protection Regulation (GDPR) and helping our customers comply with "right of access" and "right to be forgotten" requests related to GDPR. This article provides information on the personal data that is removed from Jamf Protect using the remediation process provided in Complying with GDPR Requests in macOS Security .

Note:

The information provided is limited to the data fields collected by default that customers may consider to be "personal data". This reference does not provide an exhaustive list of all data deleted from Jamf databases.

Data Removed from the Jamf Protect's macOS Security Portal Using the Remediation Process

Object

Data

When is it deleted?

Computer record

Hardware UUID

When the computer record is deleted from Jamf Protect

Computer record

Serial number (if collected)

When the computer record is deleted from Jamf Protect

Computer record

Host name (if collected)

When the computer record is deleted from Jamf Protect

Alerts

Serial number (if collected)

When the computer record is deleted from Jamf Protect or when long-term alert storage meets retention period

Alerts

Host name (if collected)

When the computer record is deleted from Jamf Protect or when long-term alert storage meets retention period

Alerts

IP address

When the computer record is deleted from Jamf Protect or when long-term alert storage meets retention period

Alerts

Username (possible in file names and paths)

When the computer record is deleted from Jamf Protect or when long-term alert storage meets retention period

Alerts

Name (possible in filenames and paths)

When the computer record is deleted from Jamf Protect or when long-term alert storage meets retention period

Unified Logs/Telemetry

Serial number (if collected)

When long-term alert storage meets retention period

Unified Logs/Telemetry

Host name (if collected)

When long-term alert storage meets retention period

Unified Logs/Telemetry

IP address

When long-term alert storage meets retention period

Unified Logs/Telemetry

Username (possible in filenames and paths)

When long-term alert storage meets retention period

Unified Logs/Telemetry

Name (possible in filenames and paths)

When long-term alert storage meets retention period

Account (Admin users only)

Username/email address

When the corresponding user is deleted1

Account (Admin users only)

External IP address

When the corresponding user is deleted1

Account (Admin users only)

Group

When the corresponding user is deleted1

1Logs from handling computer records and alerts are held for 30 days, but logs for Admin activities are held for 1 year.