We should add monitoring scripts to ensure PII data is cleared from our systems, and notify us if they find something that was not anonymised properly.
Things that need to be looked for:
production DB:
- Donations older than the expiry, and still have data in their columns or data blob
- Memberships older than the expiry, and still have data in their columns
- Payments older than the expiry, and still have data in their columns
- Orphaned payments
- Subscriptions older than the expiry, and still hold email addresses
- Fee changes older than the expiry
- Donation comments older than 3 years
- Database backups older than the expiry
- Database dumps older than 1 week
- abandoned "marked for moderation" donations
- abandoned "marked for moderation" memberships
- monitor old/deactivated user accounts not cleaned up on backend.wikimedia.de
test DB:
- same as above, some fixture/fake db entries should be kept for user testing purposes (->skipped by the monitoring)
- monitor old/deactivated user accounts not cleaned up on test-backend.wikimedia.de