3 ms·
> For one, the person requesting deletion doesn't even have to be your user. If what you wrote is true, then organizations are liable for data that someone may
by aeorgnoieang 9y ago
> For one, the person requesting deletion doesn't even have to be your user.
If what you wrote is true, then organizations are liable for data that someone may, possibly even just theoretically, be able to use to identify someone else.
Given that the law is not 'technical', maybe it'll be interpreted much more leniently than a straightforward reading would lead one to expect.
- Radim 9y agoYes, it's almost certain it will be interpreted more leniently. At least to start with. Elizabeth Denham, UK's information commissioner in charge of data protection enforcement, had this to say: "Having larger fines is useful but I think fundamentally what I'm saying is it's scaremongering to suggest that we're going to be making early examples of organisations that breach the law or that fining a top whack is going to become the norm. Our office will be more lenient on companies that have shown awareness of the GDPR and tried to implement it, when compared to those that haven't made any effort." In reality, nobody knows how GDPR will pan out exactly (including the authorities).