4 ms·
The point of the gdpr is that I can't analyze past shipping costs? To optimize how I ship in the future? Also, how does this mesh with pci retention rules. (Ye
by jimktrains2 9y ago
The point of the gdpr is that I can't analyze past shipping costs? To optimize how I ship in the future?
Also, how does this mesh with pci retention rules. (Yes, they are not law, but it's still an awkward place to be.)
- guitarbill 9y agoAh yes, somebody being overly pedantic and trying to come up with examples to spread FUD. You couldn't possibly anonymize the data and then do the analytics, unheard of.
- jimktrains2 9y agoYou're assuming that I knew I wanted to do said analysis, or that I would never want to go back to an order's record for more information. (What was ordered, or perhaps the US county someone is in that I need to figure out from the shipping address.) It's not that the analysis can't be done anonymously, but to do so requires foreknowledge of everything you would like to analyze.
- scaryclam 9y agoYou can most certainly do that...Unless you've been incompetant with your data organisation and scattered PII where it really has no business being. In which case, how about sorting out your poor data practices before worrying about how you can optimise your shipping costs?
- jimktrains2 9y agoNot pii, but personal data, which is more broadly defined in the gdpr than pii is. Second, I think you're missing the context here. If I need to encryption each log entry that pertains to a user, even if it doesn't contain pii, then adhoc analysis is nearly impossible to do.
- freeone3000 9y ago"Legitimate Interest" is pretty easy to claim if PCI requires it.