Hello everyone, I have a question about GDPR and possibility to request the account's deletion. Do you have any internal way of "anonymizing" all information of a User at once ? My understanding is that if I decide to anonymize at a certain point in time, all the history records will still contain name, email, phone about the patient. Is that correct ? Do you have a procedure to allow such process ? Thanks

$expunge will permenently delete resources and version history from the DB - but should be used with caution!

Thanks @reshma . There is no way of anonymizing in one go all data ? It is a requirement for us to have this possibility, as we are medical device and have an obligation of detaining data for drug safety surveillance process. Thanks

No built in - but teams have built anonymization functions on top

Thanks, we will look into that ! I'm just wondering if the History resources are updatable through the Medplum SDK ? Or we would need to directly access the database to modify it ?

history is on a resource not a separate resource

Ok, I have checked and seen the MemoryRepository. I guess this is where I would have to look if I want to change the history. If you have any advice on how to do so I'd be happy to hear them otherwise we will dig.