5 ms·

Encrypt data with per-user key. Drop key.

• jimktrains2 8y ago
  So, now I can't run analysis of my logs because they're encrypted? Also, that data is still associated with the user. Is it to the letter of the law to keep it, even if it's unreadable?
  • freeone3000 8y ago
    I think you're starting to get the point of the GDPR, yes.
    • jimktrains2 8y ago
      The point of the gdpr is that I can't analyze past shipping costs? To optimize how I ship in the future? Also, how does this mesh with pci retention rules. (Yes, they are not law, but it's still an awkward place to be.)
      • guitarbill 8y ago
        Ah yes, somebody being overly pedantic and trying to come up with examples to spread FUD. You couldn't possibly anonymize the data and then do the analytics, unheard of.
        • jimktrains2 8y ago
          You're assuming that I knew I wanted to do said analysis, or that I would never want to go back to an order's record for more information. (What was ordered, or perhaps the US county someone is in that I need to figure out from the shipping address.) It's not that the analysis can't be done anonymously, but to do so requires foreknowledge of everything you would like to analyze.
      • scaryclam 8y ago
        You can most certainly do that...Unless you've been incompetant with your data organisation and scattered PII where it really has no business being. In which case, how about sorting out your poor data practices before worrying about how you can optimise your shipping costs?
        • jimktrains2 8y ago
          Not pii, but personal data, which is more broadly defined in the gdpr than pii is. Second, I think you're missing the context here. If I need to encryption each log entry that pertains to a user, even if it doesn't contain pii, then adhoc analysis is nearly impossible to do.
      • freeone3000 8y ago
        "Legitimate Interest" is pretty easy to claim if PCI requires it.