Privacy Aspects

If configured to do so, the controller can collect the following personal data for the purpose of logging user activity:
  • User name (full name and domain name)
  • Workstation name
  • FactoryTalk®
     ID
No more personal data is collected than needed and no personal data is logged by default.
IMPORTANT:
The general purpose programming capabilities of the controller allow you to program the controller to collect personal data through connection to other devices and systems for any purpose. You are responsible for protecting personal data collected as a result of your applications.

Data Protection

The following provides methods to protect personal data stored by the controller through restricted access:
  • CIP Security™
     — To implement
    CIP Security™
    , see the CIP Security with Rockwell Automation Products Application Technique, SECURE-AT001.
  • FactoryTalk® Security
     — To configure
    FactoryTalk® Security
     permissions, see the Configure System Security Features User Manual, SECURE-UM001.

Data Removal

Personal data can be stored by the controller in these locations:
  • Internal memory of the controller. The circular buffer of the controller only keeps a limited amount of data within the controller.
  • External memory card, only if logging is configured to write to a text file on the card
IMPORTANT:
Data that has been retrieved by external software is the responsibility of the respective software.
You can remove personal data by using these methods:
  • Perform a factory reset on the controller to delete data from internal memory.
  • Access the text file on the memory card and delete personal data.
IMPORTANT:
The controller does not have secure reset functionality to make deleted data nonrecoverable. To address critical security concerns about data recovery, we recommend physically destroying a device when decommissioned.
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.
Normal