Manage GDPR data subject requests in Yammer Enterprise
As a verified admin, you can erase a user from Yammer to comply with a General Data Protection Regulation (GDPR) data subject request. You can decide whether to delete all files and messages created or modified by the user, or review files and messages and decide which to keep and which to delete. If you erase the user and keep the user's messages or files, the messages and files will be identified with an ID, but not with the user's name.
To delete content to honor a GDPR data subject request, your network data retention setting must be set to Hard Delete.
Ensure your network data retention policy is set to Hard Delete before deleting a user or the user's data
Yammer has data retention settings that either soft-delete or hard-delete data when a user deletes a message or file. If this is set to Soft Delete, data a user has deleted continues to be stored. If the Yammer data retention setting is set to Hard Delete, the deleted information is no longer stored in Yammer
This has two implications for complying with GDPR:
When you're doing the actual erase of the user and deleting their data, the network data retention policy must be set to Hard Delete.
If your data retention policy has been set to Soft Delete in the past, data the user deleted will show up in the data export. In order to permanently delete the soft-deleted data, you must delete it while the network is set to Hard Delete.
To see the data retention settings for your network, go to Yammer settings > Network Admin > Content and Security > Data Retention.
If needed, change the settings to Hard Delete.
In Yammer settings, select Network Admin.
Under Content and Security select Data Retention.
Select Hard Delete.
Erase a user from your Yammer home network and external networks
When you erase a user, there is a 14-day window for you to review their files and messages in the home network before the user-identifying data is completely erased. If you want to review the user's messages and files, be sure to export user data prior to erasing the user's account, or within 14 days after selecting Erase this user. After the 14-day window, files and messages will continue to exist but will be marked as belonging to a former user.
After a user's account transitions from deactivated to removed, you can no longer associate user data with the user, which means you can no longer export and review their data.
If you want to review and delete messages and files in external groups, external threads, and networks that the user is a guest member in, follow the instructions in Export data for one user and Delete specific messages or files before erasing the user. As soon as you click Erase this user, you will no longer be able to associate the user with these messages and files.
For home network users, deleting or erasing them from their home Yammer network will also remove them from all external networks. You must delete or erase guest users separately in each external network they are a member of.
Closing an AAD account does not delete the user and their information. For deletion of user information you must go the Yammer admin center and complete the instructions provided below.
When you erase a user, the following user data is deleted:
Who the person is following, the connection to conversations and topics they were following, and the connection to users who were following them
Bookmarks, language preferences, notification settings, and account activity
The list of networks they were a member of
Remove a user from your home network and external network
As an admin, you can remove a user from your home network and from any external networks they belong to. A user can also remove themself from an external network.
Remove a user (done by admin)
In the Yammer admin center, go to Users > Remove Users.
Enter an existing user's name. After you select the user, the options for removal are displayed.
If you want to keep all the user's files and messages, select Erase this user.
If you want to review the user's messages and files, and if you have already reviewed and deleted any messages or files in external groups, threads, or networks the user is a guest member in:
- Select Erase this user. Wipe their name and personal information, but leave their messages. (Can't be undone after 14 days): This deactivates the user for 14 days so that you can export user data and evaluate home network files and messages before the user is permanently deleted.
This option marks the user as deactivated. The deactivated user is listed on the Remove Users page. Within 14 days, you can reactivate the user.
After 14 days, a message is sent to all the networks admins and verified admins informing them the user has been deleted.
If you want to delete all a user's messages and files before you erase the user:
- Select Permanently remove this user and remove their messages, and then click Submit.
- When that completes, select Erase this user. This removes the user's name and activity data.
Remove a user from an external network (done by user)
If the user wants to remove files or messages they posted on an external network, they should do so before they delete their account on the external network.
Click the Settings icon .
Click Edit Settings.
On the Network tab, click Delete Account.
Remove a user from a group including an external group
In the group, click Members.
Click the Settings icon next to the user's name.
Click Remove from group.
Remove an external participant from a conversation
- In the Yammer conversation, click Remove Participants.
Reactivate a deactivated account after using Erase this user
When a user's account gets deactivated by using the Erase this user option, you have 14 days to reactivate the user.
Go to the Yammer Admin center.
Click Remove Users.
Go to the Deactivated Users section. This section will only be visible when there is at least one deactivated user account.
Click Reactivate for each user you want to reactivated.
After 14 days, the user cannot be reactivated.
Export data for one user
You must export user data for each network the user is a member of.
In the Yammer admin center, go to Content and Security > Export User Data.
Type the user's name and select the user.
Data is exported into a .zip file containing the following files.
||Summarizes the number of entries in each .csv file, and lists any errors that occur during the export.
||Parameters use for the export.
||For any live event video posted by the user, includes the network ID, group ID and name, title, description, links to the video, and additional information about the video.
The video content is not included in the export. The video is saved in Microsoft Stream. For GDPR information for Stream, see Office 365 Data Subject Requests for the GDPR, Stream
||For any file added or modified by this user, lists the Yammer ID, type of file, name, description, and path to the file in Yammer, along with metadata including the group it was posted in.
Files.csv does not contain the actual file. If you selected to include attachments in your export, files can be found in the Files folder of the zip file. The file ID in Files.csv can be used to identify the files in the Files folder or to go directly to the file in Yammer.
For information about how to go directly to a specific file in Yammer, see Delete specific messages or files.
||For any group created or modified by the user, lists the Yammer group ID, name, description, privacy status, whether the group is internal or external, link to the group, creation date, and updated date. This file also includes the aggregated total number of polls the user voted on, and the polls the user created.
||For any message liked by the user, lists the message ID, thread ID, group ID, group name, privacy status, sender ID, name and email, the full body of the message, the ids for attachments, and creation and deletion information. A list of polls you created will also be provided. For announcements, includes the title of the announcement.
||For any message sent or modified by the user, lists the message ID, thread ID, group ID, group name, privacy status, sender ID, name and email, the full body of the message, the ids for attachments, and creation and deletion information. A list of polls you created will also be provided. For announcements, includes the title of the announcement.
For information about how to go directly to a specific message in Yammer, see Delete specific messages or files.
||For any topic created by the user during the specified date range, lists the creation information and a link to the topic.
||This folder contain files that have been created or modified by the user during the specified time period. Files are in their native format and are named with their Yammer ID. For example a PowerPoint presentation might be listed as 127815379.pptx.
For information about how to go directly to a specific file in Yammer, see Delete specific messages or files.
- When the user's account activity data is ready, you'll receive a Yammer inbox message with a link to the data. Click the link to open it.
Exported data does not contain bookmarked messages, group membership, followed or following users, followed topics, the user's notification, application, and language settings, and org chart. To find this data for an individual user, click the Yammer settings icon , click People, and click the name of the user whose data you want to view. This page shows the user's profile, conversations they've participated in, any files, images, and videos they have posted, along with their bookmarks, followed and following users, and followed topics.
Delete specific messages or files
If you have the ID for a message or file, you can go directly to it in Yammer and delete it.
To locate and delete a specific message in Yammer:
Build the URL for the message. Use https://www.yammer.com/network_name/#/Threads/show?threadId= thread_id. For example, http://www.yammer.com/contosomkt.onmicrosoft.com/#/threads/show?threadID=135893.
In the message, click the More icon , and then click Delete.
To locate and delete a specific file in Yammer:
Use the Search box in Yammer. For example, for a file named 12345678.pptx in the export, search for 1235678.pptx. In the search results, click Go to File, and then click Delete this File.
Or, build the URL for the file. Use https://www.yammer.com/network_name/#/files/file_number, for example https://www.yammer.com/contosomkt.onmicrosoft.com/#/files/12345678. On the Yammer page for the file, click Delete this File.
Find and delete user data not included in the per-user export
There is some user data that is not included in an export. To find this data for a user, go to Yammer settings > People, and click the name of the user.
The following table shows how to change or delete this data if needed.
|Type of data||How to change or delete it|
|Bookmarked messages, group membership, followed or following users, and followed topics
||When you select the Erase a user from your Yammer home network and external networks to remove a user from Yammer, this information is deleted after the 14-day suspension period. As an admin, you can't change this information for a user.
A user can change or delete this information. For steps, see Tips for staying organized in Yammer.
|User settings, including notification, application, and language settings
||When you select the Erase a user from your Yammer home network and external networks to remove a user from Yammer this information is deleted after the 14-day suspension period. As an admin, you can't change this information for a user.
A user can change their own settings. For steps, see Change my Yammer profile and settings.
||If the user has a Yammer identity, there are two options:
- When you select the Erase a user from your Yammer home network and external networks to remove the user from Yammer, this information is deleted in Yammer after the 14-day suspension period.
- The user has full control of their own profile, and can modify the values. For information, see Edit the user's profile and settings (done by user).
If the user has an Office 365 identity, the Yammer user profile is pulled automatically from Office 365, which gets the profile information from Azure Active Directory (AAD). Yammer users can temporarily change their profiles in Yammer, but these changes are overwritten when there is a change in AAD, so to permanently change or delete a user's profile, you must change or delete directory data in Office 365 and AAD. See Manage Yammer users across their lifecycle from Office 365 and Add or change profile information for a user in Azure Active Directory.
Troubleshoot data export
If the .zip file is corrupted and can't be unzipped, try again. If this doesn't work, contact Support.
If the log.txt file shows export errors for one category of data, try again. If there are still errors, contact Support.
Edit the user's profile and settings (done by user)
A user can edit their own profile. Administrators can't change the user profile or settings.
The user can click the Yammer settings icon , and then click Edit Settings.
Select the tab for the change you want to make:
To change your profile, select Profile.
To change your password, select Password.
To edit your notifications, select Networks.
To see your account activity, select Account Activity.
To see what applications you've installed, select My Applications.
To set preferences, select Preferences.