4 ms·
> Here's the flip side: You can't be lose data to a breach that you don't store. That means NO storage, not even "anonymous". (which Apple clearly does) > You
by consp 9y ago
> Here's the flip side: You can't be lose data to a breach that you don't store.
That means NO storage, not even "anonymous". (which Apple clearly does)
> You can't have a rogue employee crow on social media about how they have access to data you don't store.
Requires NO storage, which they clearly do.
> You can't be liable for GDPR violations about PII you don't store.
If you store it "anonymous" you can, since the only requirement for it is to be personal data and there is zero change it can't lead to the person and anyone working with those 'unique' identifiers can tell you they most likely aren't that anonymous and the data can be used to trace a single person.
- falcolas 9y ago> That means NO storage [...] There's a difference between storing only the data required for conducting your business, and storing all the data you possibly can for some imaginary future use. I'm suggesting the former is a better practice. > If you store it "anonymous" you can Anonymity via random-but-unique IDs is a tenuous protection at best when storing everything you possibly can. Take, for example, the fact that with a gender, a zip code, and a birthday, you can be uniquely identified with around 85% accuracy [0]. None of those are traditionally considered to be PII, and it's pretty likely that these are the kinds of things stored "anonymously" by the "store it all for later" kinds of companies. [0] https://www.eff.org/deeplinks/2009/09/what-information-personally-identifiable https://www.eff.org/deeplinks/2009/09/what-information-perso...