4 ms·

If the records no longer contain PII, then they've arguably satisfied their duties under the law, haven't they? Has a court held otherwise?

• oliwarner 4y ago
  But the records do. > Your account showing your name, address, credit card, etc can still be accessed whilst the token stored in the cookie is still valid
  • zbuf 4y ago
    They're also given time for the deletion to be fully complete -- backups etc.. That could apply here.