3 ms·
Ha, and then there is the opposite regulation that you have to delete user data.
by jiggywiggy 4y ago
Ha, and then there is the opposite regulation that you have to delete user data.
- MonkeyMalarky 4y agoWell you see, you need a complete record of when it was created, every change that occurred, everyone who could view it and also log every access attempt. But it. You're not actually supposed to keep it. Just everything surrounding it.
- scott_w 4y agoNot quite. GDPR (and equivalents) have clear escape hatches to allow you to store data if you have good reason (even if the data subject requests its removal). Invoices, from the article, is a great example. That record must remain unchanged in most financial regulations. I’d wager a customer sending a deletion request for invoices will be met with raucous laughter from the legal and finance teams.
- giantg2 4y agoIn some industries the retention regulations trump the deletion ones. I believe finance is one area where they will delete some of your data, but are still required to maintain 7 years of specifically listed data.