3 ms·
> What could they possibly be doing that makes not abusing a handful of user's privacy an insurmountable issue? Storing their HTTP logs on archived CD-ROMS wou
by zeveb 8y ago
> What could they possibly be doing that makes not abusing a handful of user's privacy an insurmountable issue?
Storing their HTTP logs on archived CD-ROMS would be a violation of the GDPR, unless that same mom-and-pop operation offered users a way to request that CDs be replaced with new versions at will.
I don't think that counts as an abuse of privacy, but it is a violation of the GDPR, which makes immutable logs which contain IP addresses illegal.
- gcthomas 8y agoThere is no violation of the GDPR in just holding data, especially data for which you have a legitimate business reason to process. It is probably PII, so look after it as you would other PII. The GDPR give a number of reasons where the right to be forgotten does not apply, including for archival purposes, or when the controller was not relying on consent for the processing.