3 ms·
And going through all the backups to overwrite the data? Backups that would have been written to CD or tapes?
by ww520 8y ago
And going through all the backups to overwrite the data? Backups that would have been written to CD or tapes?
- talaketu 8y agoYour backup retention policy should comply with GDPR, and you should be prepared to justify extended retention periods.
- wlll 8y agoYep, you have one month. If you are storing backups for longer than this then perhaps you have to ask yourself why. For instance, the last company I worked for deliberately didn't keep database backups past 30 days and had that policy for some years prior to GDPR. The idea being that it would be expected by a user that when they hit "delete" on something in the web app it would actually be deleted. (Additionally there is a whole minefield of crap that could happen if you got subpoenaed and had to due process on months or years worth of backup data, but this wasn't the primary driver of the policy) This is a pretty good read on the matter: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/ https://ico.org.uk/for-organisations/guide-to-the-general-da...