GDPR Compliance: Make it possible to subject redaction to whistleblower vetting or timeout

[evilaliv3]

Proposal

Considering that:

• the GDPR requires to delete privacy related information that is not relevant
• the european directive on whistleblowing mandate recipients of that information to delete it without undue delay

this ticket is to propose extending #3420 and #3429 this ticket is to propose the implementation of a feature to subject redaction to whistleblower vetting or timeout.

Whistleblowers in fact are the only one able to confirm that the provided information are unnecessary.
Alternatively whistleblowers could intentionally deny the deletion requesting to preserve the evidence and explaining the reason why such a content should be preserved.

[evilaliv3]

@susannaferro @AnXh3L0 @elbill @larrykind: Following the call of today i created this ticket. Please feel free to load here you comments or notes if any.

\cc @giorgiofraschini