3 ms·

Travelex, as a financial services company, is probably obligated to retain records. GDPR defers to these obligations. A company outside finance might definitel

• Jimw338 7y ago
  > financial services company, is probably obligated to retain records. GDPR defers to these obligations. Gee - how long until the GDPR-o-crats demand a fine from a company (possibly the "right to be forgotten" thing), and the company then uses the defense that "we would have destroyed the information, except for some other EU regulation.. You figure your own way out of that logical puzzle!"
  • Kalium 7y ago
    Fortunately, GDPR explicitly spells out that it defers to other legal retention obligations.
• TheCoelacanth 7y ago
  They're obligated to retain some information for a certain period of time, but certainly not all information that they have and not forever.
  • Kalium 7y ago
    You're absolutely right. In this case, it means that an append-only data store with a fixed retention time might be a perfectly reasonable way to store certain kinds of records. This means that an append-only data store is not guaranteed to run up against deletion requirements in all cases. In my opinion, this is particularly salient and worth being aware of when the conversation centers around a financial company, data storage, GDPR, and deletion requirements. It is possibly not always likely to be as simple as "use append-only" or "append-only likely to be illegal".