3 ms·
What about deleting data in backups for an EU resident who submitted a request for data deletion? If a company is using mysqldump or equivalent it seems difficu
by leesalminen 9y ago
What about deleting data in backups for an EU resident who submitted a request for data deletion? If a company is using mysqldump or equivalent it seems difficult to just drop certain records from those .sql files.
- chinathrow 9y agoDifficult yes, impossible not.
- leesalminen 9y agoOf course. For us, it came down to cost. EU customers make up <1% of our revenue. Implementing this non trivial feature didn’t make sense for us financially. So, we decided to drop all EU customers entirely.
- jumpkick 9y agoHave a reasonable retention policy on these backups. Backups are a "legitimate business interest" and you don't need to purge "right to be forgotten" requests from your backups if you stick to a reasonable and publicly-documented retention policy. This is advice that I've received from counsel. However, I am not a lawyer, and this in no way should be taken as legal advice.
- cobbzilla 9y agoIf you ever had to restore from backup, I hope you kept track of what content now needs to be "re-forgotten"
- leesalminen 9y agoWe received similar advice from our legal counsel, but got stuck on this implementation detail.