3 ms·
Assuming the remaining data can't be used to deanonymize them. This solution buys into the myth that anonymizing data protects PII.
by cromwellian 8y ago
Assuming the remaining data can't be used to deanonymize them. This solution buys into the myth that anonymizing data protects PII.
- TeMPOraL 8y ago"Anonymizing" would be replacing each user's PII with a value that's unique to that user. Instead, you could just blank it out or overwrite with universal "data removed because of GDPR" token.
- cromwellian 8y agoThat highly depends on the DB used. If you're using a log structured database, it's possible the original data could still be there. Immutable databases that never delete or overwrite entries exist. And what if the PII is stored in a blockchain? Then what?
- TeMPOraL 8y ago> And what if the PII is stored in a blockchain? Then what? No clue. But I can't wait for that to be tested, because I'm very curious what the solution will turn out to be.