Europe is pushing for a new regulation for data protection: https://www.eugdpr.org (translated to RGPD in french).

In short, user data are sensitive data that shouldn't be conserved forever in databases.

With regards to OAR, that would mean that usernames associated to jobs in a OAR database should be forgotten after some time. Another option could be to anonymize them.

It is let to the admin of any OAR installation to take care of those concerns. Database can be reset (cleared of any history) on a regular basis, or one may anonymize usernames associated to old jobs. One could also consider providing anonymized usernames to his users from the start…

Any experience (strategy, SQL scripts, etc) with that matter is welcome to be contributed in this page.