Export, erase and the incident log

These are the privacy controls for a company's data. They are for owners and, for exports, accountants too.

Exporting all your data

1. Open the company's privacy controls and choose export.
2. Confirm your password or a fresh authenticator code. The check lasts 5 minutes.
3. The export is one JSON file with everything in the company: accounts, entries, contacts, documents, history and settings.
4. The export itself is written to the edit history, with the date and the person.

Keep the file somewhere safe. It holds your full books.

Erasing a company

Erasing removes the company, its snapshots and its file for good. It cannot be undone.

• Only the owner can erase.
• Erase is allowed only after the legal retention period for the country has passed. See record-retention.
• The erase check shows the first day it is allowed. Before that day, the erase is refused.
• Confirm your password or a fresh authenticator code first.
• Export everything before you erase.

The incident log

Use the incident log when personal data has been lost, exposed or changed without permission.

1. Open the incident log and choose to record an incident.
2. Describe what happened, when you found it, and what data was involved.
3. Enter the number of people affected, as well as you can.
4. Save. The entry is kept in the history and cannot be removed.

The log then shows the next steps for your country. The rules in each country set deadlines, so act on them quickly. For the United States, notice to the FTC is due within 30 days when 500 or more people are affected. For Canada, notice goes to the Privacy Commissioner and the people affected when there is a real risk of significant harm. For India, the Data Protection Board must be told, with a detailed report within 72 hours. Confirm each duty with counsel.

What this does not do

Pop Books does not notify anyone for you. The log records the incident and shows what the law requires.