3 ms·

> We will use the information you provide to process and to maintain a record of your request. What a paradox...In order to delete your records, they create re

• tzs 6y ago
  For data on people in the EU, that's essentially required to comply with GDPR. That's because of backups. GDPR doesn't really say if handling a deletion request just requires deleting from your live databases or if you also have to through your backups and delete from them too. I didn't save the link, but at least one country's privacy regulator has clarified that deletion requests do not apply to backups, but if the backup is ever restored you have to delete any restored records that had been subject to a deletion request. Hence, the need to maintain a record of deletion requests in sufficient detail to re-delete those records if they ever come back.