PII and GDPR Requests

To aid you in complying with PII or GDPR requests you may receive as a Realm owner, we’ve added API capability to destroy all learner information within an application via the API.

The V2 API method DeleteAllLearnerData will kick off an asynchronous process which will crawl though all of the data in your application and remove PII tied to the learnerId you specify in the request. Due to the destructive nature of this operation, it is required that you pass in an email address which is liked to a SCORM Cloud account of sufficient privilege within the Realm (either Owner or Administrator) as an additional form of authorization for this request.

Since it is a possibility that a learner may exist in multiple applications within a realm, this method may need to be applied to each application containing learner information. If it is detected that the learner is in other applications in the account, OR a learner’s email was used with multiple learner ids, an email will be sent to the provided email address containing an overview of this information. If you are aware ahead of time that a learner exists in multiple applications, and you want to remove them from the entire realm, you can use the realm-wide delete operation available via the website.

If the learner only exists in the requested application, you’ll receive an e-mail confirming its completion.