# GDPR & Compliance {#gdpr--compliance}


Data protection and regulatory compliance in Ever Gauzy.


## GDPR Requirements {#gdpr-requirements}


| Requirement         | Gauzy Implementation         |
| ------------------- | ---------------------------- |
| Right to access     | Employee data export         |
| Right to erasure    | Account deletion, data purge |
| Data minimization   | Configurable data collection |
| Consent management  | Screenshot consent, tracking |
| Data portability    | JSON/CSV export              |
| Breach notification | Audit logging, alerts        |


## Data Subject Rights {#data-subject-rights}



### Right to Access (Article 15) {#right-to-access-article-15}


Employees can export their data:

1. Go to **Profile** → **Privacy** → **Export My Data**
2. Downloads JSON with all personal data


### Right to Erasure (Article 17) {#right-to-erasure-article-17}


Admin can delete employee data:

1. Go to **Employees** → select employee
2. Click **Delete** → **Permanently Delete All Data**
3. Removes: user account, time logs, screenshots, activities


## Data Collection Settings {#data-collection-settings}


| Data Type        | Default  | Configurable |
| ---------------- | -------- | ------------ |
| Screenshots      | Enabled  | ✅ Per org   |
| Activity levels  | Enabled  | ✅ Per org   |
| App/URL tracking | Enabled  | ✅ Per org   |
| Mouse/keyboard   | Enabled  | ✅ Per org   |
| GPS location     | Disabled | ✅ Per org   |


## Data Retention {#data-retention}


Configure automatic data cleanup:

```env
# Auto-delete screenshots older than N days
SCREENSHOT_RETENTION_DAYS=90

# Auto-delete activity logs older than N days
ACTIVITY_RETENTION_DAYS=365
```


## Audit Trail {#audit-trail}


All data access and modifications are logged. See [Audit Logging](https://sourcey-gauzy.pages.dev/architecture/audit-logging/index.md).


## Related Pages {#related-pages}


- [Data Encryption](https://sourcey-gauzy.pages.dev/security/data-encryption/index.md) — encryption
- [Audit Logging](https://sourcey-gauzy.pages.dev/architecture/audit-logging/index.md) — audit trail
- [Data Export](https://sourcey-gauzy.pages.dev/features/data-export-formats/index.md) — exporting data