deletion/retention of data is the harder part than accessing data. deletion after a reasonable time, such as account shutdown request by user. or users should h

deletion/retention of data is the harder part than accessing data. deletion after a reasonable time, such as account shutdown request by user. or users should have option to delete. or if you keep data for a long time, encrypting it safely. add on top of that legal holds (subpoena) and that it’s affecting your core data models, it’s not a simple task. it’s a lot of work. one nice problem that popped up is we have mysql tables that can’t handle the delete traffic fast enough. gdpr is not a project you want to leave till the last few weeks