3 ms·

GDPR - please delete me from all your systems. JFC. Harry get the key to the basement, need to dig out some tapes. San, can you pop down to the store and get s

• supertrope 8y ago
  I don't know how GDPR handles backups and what time tables are allowed for reasonable data retrieval and expunging. Encryption decreases the volume of data that needs to be most carefully protected from the entire data set down to the key (and backups of said key). I imagine that data on mediums that make data retrieval and writing expensive can be encrypted with compartmentalized keys. So when Jane Doe wants her data deleted, delete the keys.
  • ed_blackburn 8y ago
    It's another reason why I think the cost of managing keys appropriately is worth it for crypto-shredding.
  • spiralx 8y ago
    > I don't know how GDPR handles backups and what time tables are allowed for reasonable data retrieval and expunging. Keep a log of user ids who have requested deletion and purge their data whenever doing a restore. And don't keep backups for longer than required, which I think is generally something like five to seven years barring specific legal requirements.