4 ms·
Not really. Having reliable backups is 1) a legitimate interest for the data processor, and 2) possibly a part of the service in question (that's more generic a
by ahje 7y ago
Not really. Having reliable backups is 1) a legitimate interest for the data processor, and 2) possibly a part of the service in question (that's more generic and not really tied to Facebook).
The data processor needs to make sure old backups are deleted in a timely fashion, and also need to make sure that data that has been deleted will be deleted again, should the need to restore the data arise.
- smueller1234 7y agoIronically, the gdpr also attempts to protect you from "accidental data destruction" (what folks would usually call data loss in storage, though the gdpr uses the expression for 'lost a USB drive the somebody else can find'). This means that if nothing else, gdpr makes it legitimate business interest (compliance) to have IMMUTABLE backups.
- anonymousDan 7y agoStore the backups encrypted under a separate key for each user, and then throw away the user's key.
- Someone 7y agoIn facebook’s case, that means both backup and restore processes must have access to over a billion encryption keys. Doable? Maybe, but it wouldn’t surprise me if that made it impossible to make backups in a reasonable time frame. And even that isn’t enough for the case where a user deletes part of their data.