3 ms·
Delete their email address, name, or any other identifying information. That's it. To me, the troubling factor is that the EU hasn't clarified the law so seeks
by true_religion 10y ago
Delete their email address, name, or any other identifying information. That's it.
To me, the troubling factor is that the EU hasn't clarified the law so seeks to apply it to individuals who are not in the EU and never intended to do business with EU residents.
- ska 10y agoany other identifying information This part is actually much harder than it looks. Honestly though, if you tell users you can delete their data on request, you should just do that - delete all of their data, full stop. If you can't or choose not to, you should just be up front about that, also - that means in plain language they will see, not buried in a TOS or whatever. It's the only ethical way to handle this. National boundaries and jurisdiction are side issues, really.
- jacquesm 10y ago> This part is actually much harder than it looks. Not really, at least I've found keeping data much harder than deleting it. The only hard part is backups.
- ska 10y agoI think I was unclear - I meant that deleting only "identifying" data, i.e. anonymizing a dataset is hard. Perhaps I misread the earlier comment. Deleting all data is as you note, easy, with the exception of backups.