...
| Service | Data type | Retention period |
|---|---|---|
| Patient information | 42 days + 6 months of no user interaction with patient or its searches: the patient is anonymised by replacing the patient ID with a random string and the birth date with birth year. Patient is no longer accessible by any organisation, except for WMDA admins. |
| Search results information | Search result are removed when the patient is "inactivated" (set to the "STP" status). Statistical data regarding number of search results and type of search are retained for analysis purposes. | |
| Logs regarding API and website use and associated error messages. | Up to 3 years. | |
| Encrypted message contents for non-retrieved messages | Messages are available for retrieval for 90 days. After that they are marked as "retrieved" and handled as such. See below for information on retention and destruction information on "retrieved" messages. |
| Encrypted message contents for retrieved messages | In order to facilitate recovery of retrieved messages, these messages are retained for 72 hours after retrieval. | |
| Logs regarding message sending and retrieval. Contains meta information on messages, such as the sending and receiving organisation and validation information. | Up to 3 years. | |
| Donor/CBU, ADCU or any other stem cell source data provided by registry and stored in the global database. | Until data is requested to be removed by data owner (typically a registry, donor centre or cord blood bank) |
| Files uploaded to data manager | 2 latest files for as long as they were created using an XSD version currently being supported by WMDA. Older files for 30 days. |
Security Measures:
WMDA utilizes standard security measures and encryption practices to protect stored data from unauthorized access, disclosure, alteration, or destruction. The organization is dedicated to upholding the confidentiality and integrity of user information through the implementation of encryption, access controls, and regular security assessments. It's important to note that while these measures are industry-standard, no system is entirely foolprooffool proof. As such, we cannot offer absolute guarantees regarding the security of the data. WMDA cannot be held responsible for any breaches or data loss. You can contribute to the safety of the system by using strong passwords, proper device security and by not sharing your passwords.
...