3 ms·
While one major use of something like this would be backups, how does one handle these backup sets with respect to GDPR requests? The window to respond is 30 da
by scurvy 8y ago
While one major use of something like this would be backups, how does one handle these backup sets with respect to GDPR requests? The window to respond is 30 days, so keeping backups longer than say 25 days seems cumbersome. You would need hot access to the sets to load them up and delete the data.
- tpetry 8y agoEncrypt the backups and store the encryption key in a normal non-archival bucket.
- jsnell 8y agoEncrypt backup data with a per-user key, keep the keys only in hot storage, delete the key when a user is deleted.
- anoncake 8y agoWont that make the backups useless in case of a data loss (i.e. always)?
- jsnell 8y agoYou don't keep a single copy of each key, but store enough redundant copies to get the proper number of nines. Preferably that's redundant geographically, in terms of storage technology, and in write frequency. The important part is just that the keys don't end up in long term cold storage. Either it's only retained for a short period (e.g. tape backups that get rotated after two weeks), or it supports live deletion.