3 ms·
I wonder if they also go through all of their backups and purge the PII. I would be willing to bet, they don't.
by warmwaffles 5y ago
I wonder if they also go through all of their backups and purge the PII. I would be willing to bet, they don't.
- hobs 5y agoNot required by the GDPR... so they will not.
- c0balt 5y agoBackups usually have limited retention after various data protection agencies. In my current location the recommended time is a few weeks for backups, a few days for logs etc. Those agencies are fully aware that nobody goes around purging data from backups (which may also be hard with airgapped backups etc.) and you might need to wait before being "forgotten".
- DelightOne 5y agoAre they allowed to restore the account from backup if the user asks for the reopening of the account?
- hvidgaard 5y agoYou only need to state to what extend and period the information is stored in backups, and have a process in place to purge it again in case of a restore.
- warmwaffles 5y agoI never realized that was the rule. I thought you had to go in and wipe the backups regularly.
- hvidgaard 5y agoThat would be infeasible for cold storage.