3 ms·
That’s kind of a false dichotomy; lots of things are both assets and liabilities. I work at a megacorp, and we have an entire group that goes around auditing p
by brookst 4y ago
That’s kind of a false dichotomy; lots of things are both assets and liabilities.
I work at a megacorp, and we have an entire group that goes around auditing projects to ensure compliance with data rentention policies, which include mandatory deletion of different types of data at different timeframes.
Financial transaction records have a very long mandatory retention, IP addresses for logins have a fairly short mandatory deletion. Product telemetry has strict rules about avoiding PII and very very quick deletion (aggregate data can be kept longer).
I’m sure the policies could be improved, but I suspect every large company is intensely aware of the importance of data deletion, even if competing priorities sometimes lead to longer than technically/legally required retention.
- organsnyder 4y agoI work on the Privacy Engineering team for one such company. Data retention is a huge topic and while there are often good guidelines, there usually aren't hard-and-fast rules. It's an exciting specialty for anyone that enjoys ambiguity (I like to joke that I enjoy the space since my dad was a philosophy professor). It also pays well and is recession-resistant.
- whimsicalism 4y ago> very very quick deletion What is very, very quick? And why?
- brookst 4y ago14 days in many cases, 24 hours in some. That quick because it is very hard to ensure that app telemetry doesn't have any confidential / sensitive information. And if the purpose is troubleshooting, there's no value in old data.
- erik_seaberg 4y agoWhen finding the proximate cause, it's pretty important to know whether a problem started today or went unnoticed for a month.