Managing privacy settings for devices in the IBM MaaS360 Portal

Use privacy settings to manage Personal Identifiable Information (PII) that is collected from devices in the IBM® MaaS360® Portal.

About this task

With privacy settings, you can restrict devices from collecting the following PII data based on ownership types and device groups.

  • Restrict Location Information: If this setting is enabled, the location of the device is no longer collected by MaaS360 from the device.
  • Restrict Network Information: If this setting is enabled, the network details of the device are no longer collected by MaaS360 from the device.
  • Restrict App Inventory Information: If this setting is enabled, an inventory of personal apps is no longer collected by MaaS360 from the device.
Note: If you change privacy settings for a device, the device stops collecting data within 15 minutes of the change. iOS continues to use location services locally on the device to periodically monitor the status of the device.

Procedure

  1. From the IBM MaaS360 Portal, go to Privacy Management > Security > Privacy.
    The Privacy Settings page is displayed.
  2. Configure the following options to specify how you want MaaS360 to manage personal information for your devices:
    Restrict Location Information
    If selected, this setting restricts MaaS360 from collecting location information, including a physical address, geographical coordinates, and history.
    • Select Applicable Ownership Types: Specifies which devices (corporate-owned, employee-owned, or unknown device types) are exempt from collecting location information.
    • Select Applicable Device Group: Specifies which device group (all devices, Android devices, or corporate-owned devices) is exempt from collecting location information.
    Restrict Network Information
    If selected, this setting restricts MaaS360 from collecting network-related indicators such as IP address and SSID.
    • Select Applicable Ownership Types: Specifies which devices (corporate-owned, employee-owned, or unknown device types) are exempt from collecting network information.
    • Select Applicable Device Group: Specifies which device group (all devices, Android devices, or corporate-owned devices) is exempt from collecting network information.
    Note: On Windows devices, MAC address collection is restricted for non-Wi-Fi networks.
    Restrict App Inventory Information
    If selected, this setting restricts MaaS360 from collecting personal app information from a device.
    • Select Applicable Ownership Types: Specifies which devices (corporate-owned, employee-owned, or unknown device types) are exempt from collecting app inventory information.
    • Select Applicable Device Group: Specifies which device group (corporate-owned, employee-owned, or unknown device types) is exempt from collecting app information.
    Note:
    • Apps that are distributed from an enterprise IBM MaaS360 App Catalog or apps that are required by the corporate security policy are still tracked regardless of whether this setting is enabled.
    • For Windows desktops or laptops, MaaS360 cannot distinguish between corporate or personal .msi or .exe packages. If this setting is enabled, all Windows packages are considered personal apps and app inventory information is not collected from the device.
  3. Click Save.
    With privacy settings or device ownership attributes changes, the following timings occur for devices that are managed:
    • Data collection from relevant devices stops within 15 minutes when privacy settings are changed.
    • Historical data for a location is cleaned up within an hour.
    • Historical data for personal apps is cleaned up within 48 hours.
    iOS continues to use location services locally on the device to periodically monitor the status of the device. If location information privacy settings are enabled, location details are not sent to MaaS360. When privacy settings are enabled, features that depend on location or personal apps data do not function as expected.

Results

Click View Change History to see the history of changes made in Privacy Settings, which is displayed on the Privacy Settings Changes page.

When these restrictions are enabled, the device summary displays Privacy Settings Enabled for the affected device attributes.