[user104658]

Originally Posted by AnnieK

That was my problem with some historic candidates on our database, so I deleted them. They can give consent if the come back and sign up again.

Deleting users from the database directly causes huuuuugggeeee issues with vBulletin. I would very much advise against it.

Not least; deleting a user "raw" from the database does NOT delete their posts, they are still there in the thread, and the username is still present as plain text. It DOES however detatch the user ID from the username... making that persons posts and details impossible to locate in the database, meaning that if there's personal information in those posts, and they ask for it to be gone, there's no realistic way to locate all of it.

In other words, to comply with the law you'd have to delete the entire database.

More realistically... surely the only personal data TiBB holds is email addresses? And it should in theory be possible to blank the email address field of non-current users, then mail current members for confirmation that they're ok with you storing theirs.

Would also be a good idea to delete any "members pictures" threads that contain pictures of members who are not still currently active.

For current members all you really need is a cookie pop-up that makes us click "I agree" to a tonne of disclaimers, and stores the response.

You should also prune EVERYTHING from any member you're going to permanently ban... or alternatively (and a good option IMO) instead of classic bans, move permanently banned users to a cutom usergroup that can still log in and edit their own posts, but not post new posts. That gets you out on a technicality because the user then has full access to remove / alter their own data.