3 ms·
That seems a very generous interpretation. The wording about overriding legitimate interests is specifically in the case of erasure because a data subject obje
by Silhouette 7y ago
That seems a very generous interpretation.
The wording about overriding legitimate interests is specifically in the case of erasure because a data subject objects to processing. It doesn't cover any of the other cases where erasure is required, any one of which is sufficient. One of those is "the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed" and another is "the data subject withdraws consent on which the processing is based according to [cross-references] and where there is no other legal ground for the processing".
There may be legitimate interests in things like maintaining logs and back-ups, but it would be quite a stretch to argue that an organisation with the resources of Facebook and the potential amount and sensitivity of personal data Facebook are dealing with can't manage to delete the underlying data in as long as 3 months.
- derekp7 7y agoIs it even possible to delete something from the middle of a tape (assuming tape backups are used)? The only thing that can be done is to read the tape in, transfer all "good" data to another tape, then erase the original tape.
- Silhouette 7y agoThat's the sort of question that makes the GDPR regrettably ambiguous. It uses a lot of words like "legitimate", "undue" and "reasonable", but there could be genuine uncertainty about how those would apply in quite a lot of practical, everyday situations. In this situation, however, we are talking about an organisation whose entire business model is built on personal data given by literally billions of people over a period of many years, with tens of thousands of employees and tens of billions in revenues, which is operating on a scale where it is demonstrably capable of designing and building replacements to its own specifications for standard infrastructure and deploying them throughout its own data centres. I don't think it would have much credibility if it claimed it couldn't guarantee to comply sooner than three months after a request because it regularly backs up possibly the largest database in the world on magnetic tape.
- jkaplowitz 7y agoIn a conceptual rather than literal sense, yes it's possible to do this in certain cases. In particular, if the per-account bits of the backups are encrypted with per-account keys, deleting an account's key makes that account's bits of the backups unrecoverable.
- cameronbrown 7y agoI believe Facebook uses Blu-rays and regular HDDs for cold storage, not tape. https://datacenterfrontier.com/inside-facebooks-blu-ray-cold-storage-data-center/ https://datacenterfrontier.com/inside-facebooks-blu-ray-cold...