GDPR Retention Purge
Per-field anonymization, a legal hold override, and an append-only purge log - not a Data Recycle clone
The video below shows GDPR Retention Purge running on a real Odoo 19 database. Want it driven against your own data, or a question answered first? Ask and we will set up a session.
GDPR Article 5(1)(e) storage limitation - keep personal data no longer than necessary - is one of the most commonly cited failure points in EU DPA enforcement actions.
Odoo Community already ships Data Recycle for free, which finds stale records and archives/deletes the whole record on a schedule. This app deliberately does not duplicate that. What it adds: per-field anonymization that blanks just the PII fields (name, email, phone, notes) while leaving the record and its non-personal business data intact; a Legal Hold override that exempts a specific record from anonymization for litigation or a statutory requirement, checked before every run, no exceptions; and a regulator-exportable, append-only audit log - proof of what was anonymized, when, and under which rule. No one can edit or delete a log entry through the UI once it's written.
Meant to sit beside Data Recycle and OCA's data-protection registry, not replace either.
What it does
Can't break a record by accident
The field picker refuses required fields and multi-value relations - both at the UI level and as a real server-side constraint, not just a hint you can bypass.
A log that's actually evidence
No perm_write, no perm_unlink, no manual perm_create for any group, including admins - only the scheduled run itself can write a log entry.
Screenshots
Requirements
- Odoo 19.0, Community or Enterprise.
- Odoo.sh or On-Premise only. Third-party apps cannot be installed on Odoo Online (SaaS) databases — check your hosting before buying.
- Module
mh_gdpr_retention, version 19.0.1.0.11, licensed OPL-1.
Related apps
Real WCAG violations, found in your rendered pages - not another overlay widget
The Article 33 72-hour clock starts the moment you log the incident
An editable rule engine, not a hardcoded legal database - because even the professionals disagree