Privacy
Consider personal data in debug logs
Target group: System administrators
Description: The debug logs of CODESYS 4 can contain personal and privacy-relevant information, in particular user names, file paths, and snippets from IEC source code – for example from compiler messages.
Action: Pay attention to the debug logs when implementing your data protection requirements – for example GDPR. Define storage and deletion periods for the log files according to the data protection regulations of your company and protect the log directory from unauthorized access (see also: Provide the log directory with restrictive permissions). Set the minimum log level to the highest level appropriate for your use case.
Reasoning: If log files containing personal data are stored indefinitely or if log files are accessible to unauthorized users, then sensitive information may be disclosed and data protection regulations may be violated.