Deletion of active customers purchase history

Technical Q&A

Topic summary

Issue raised: Under GDPR (General Data Protection Regulation), merchants must define and enforce retention periods for customer data, including for active customers. A recent decision by Finnish data protection authorities states it’s not necessary to keep purchase data for the entire duration of a customer relationship, which may influence EU-wide practices.

Request: Guidance or a built-in tool to automatically mask or remove customer purchase history after a defined period, rather than relying on manual, per-request deletion. The post asserts such a tool currently doesn’t exist and asks if it’s planned.

Implications: Compliance pressure for EU merchants to limit retention of purchase histories and implement time-based data minimization.

Status: No solution or official confirmation provided in the thread; the question remains open.

Reference: The linked Finnish authority decision is central to understanding the compliance expectation: https://tietosuoja.fi/-/tietosuojavaltuutettu-ostotietojen-sailyttamista-koko-asiakassuhteen-ajan-ei-voida-pitaa-tarpeellisena

Summarized with AI on January 10. AI used: gpt-5.
1

According to GDPR merchants must decide the retention time for customer data and act accordingly. It is not enough to say that all data for customers which have not been active recently will be deleted. It is also mandatory to define for how long the customer data for active customers is kept.

Is there a way to deal with this legally binding issue? The authorities in Finland made a decision which will most likely have European wide consequences. And manual personal data erasure request is not the answer. We should have a tool which mask customer purchase history after defined period of time. I know that tool does not exists. But is it coming? It should, if the customers within EU are valued.

https://tietosuoja.fi/-/tietosuojavaltuutettu-ostotietojen-sailyttamista-koko-asiakassuhteen-ajan-ei-voida-pitaa-tarpeellisena