4 ms·
Yep, we've been through this discussion where I work just a few days ago and one way hashing even with salt is _not_ compliant as you can search for whatever yo
by tyfon 9y ago
Yep, we've been through this discussion where I work just a few days ago and one way hashing even with salt is _not_ compliant as you can search for whatever you hashed and get a hit (SSNs, emails etc).
- otp124 9y agoWhile GP stated soft-deletes aren't allowed, I figured I'd contribute to this thought exercise. What about symmetric encrypting the field(s) and then giving the customer the key, and tell them to print it or store it safely, or else they won't be able to recover? And then don't store the key or write it to disk (remove it from memory)
- tyfon 9y agoThen you might as well scramble the data completely as the customer is not supposed to be able to recover the data after deletion.
- mailbag 9y agoWe're going through a similar thought process now for a blockchain based data-store. If the data is symmetrically encrypted and the key is deleted.. does that count as hard deletion? The data is unrecoverable.