3 ms·
Yea but then you need to be really careful not to let the user sneak in any PII anywhere; say a user sets their full name + address as their username; they can
by DarkWiiPlayer 4y ago
Yea but then you need to be really careful not to let the user sneak in any PII anywhere; say a user sets their full name + address as their username; they can now request that you delete this data.
- naniwaduni 4y agoWhile you probably do need to expect to delete usernames (usernames are expected to be identifying), but the user sneaking personal data into fields where it isn't expect is probably out of scope as not part of a filing system anyway. Certainly I wouldn't expect a serious problem to punt it to "we'll deal with it manually on a 3-month turnaround if it becomes relevant" as long as you're not actively designing your systems to not be able to delete data.