4 ms·
> How exactly do you "forget" the data on the logs? If we think around the options, you can have either: i) eventual deletion (log retention policy) ii) compa
by Antwnis 9y ago
> How exactly do you "forget" the data on the logs?
If we think around the options, you can have either:
i) eventual deletion (log retention policy)
ii) compacted topics (and push null values)
iii) expensive re-processing of the entire log
iv) expensive segment re-write operation
with each option bringing in a new set of challenges
- nerpderp83 9y agoEncrypt with a user specific key when the data enters the log. You can effectively delete all the user specific data by throwing the key away. No tracking down files or reprocessing necessary.
- pcl 9y agoIs that acceptable within GDPR requirements?
- nerpderp83 9y agohttps://en.wikipedia.org/wiki/Crypto-shredding https://en.wikipedia.org/wiki/Crypto-shredding https://law.stackexchange.com/questions/23375/gdpr-general-data-protection-regulation-crypto-shredding-or-regular-delete https://law.stackexchange.com/questions/23375/gdpr-general-d... I believe it would be, but IANAL.
- tscs37 9y agoThe GDPR contains exceptions when deleting individual user data is infeasible or if the data in question is a backup, in which case you must only keep a log somewhere so you don't forget to delete again.
- mk89 9y agoToday’s encryption is strong. Who knows about tomorrow?