3 ms·
And the difficulty can rise exponentially if you have a giant stack that wasn't designed with GDPR in mind (though it may be totally benign in its risk towards
by Matticus_Rex 8y ago
And the difficulty can rise exponentially if you have a giant stack that wasn't designed with GDPR in mind (though it may be totally benign in its risk towards data subjects) and which cannot be easily disentangled to comply with some of these requirements.
- linker3000 8y agoOpinion on the matter: "The GDPR however does make a small concession to companies in this case: the steps they need to take in this direction are limited to the available technology and the cost of its implementation. Organizations must take reasonable measures to ensure processors are aware of the request, but will not be at fault if the data is not completely erased by third parties." https://www.endpointprotector.com/blog/gdpr-essentials-the-right-to-erasure-who-can-request-it-and-how-is-it-applied/ https://www.endpointprotector.com/blog/gdpr-essentials-the-r...
- Matticus_Rex 8y agoThe vaguery there is the problem. I know how I would decide if it were up to me, but if a supervisory authority comes calling, that's just my argument, and they almost certainly have a preset opinion about what is reasonable.