3 ms·

If your app doesn't easily support redaction of personal data, you have a design flaw to fix.

by _cenw 3y ago

Silhouette 3y ago
How are you going to "fix" that "design flaw" when the personal data in question is the result of legally required customer age checks? Evidence needed to support your tax filings? Used to identify and block people who are repeatedly trying to defraud you or breach your security? Subject to a legal hold because it might provide relevant evidence in some legal action between other parties or it's been requested as evidence by some government committee? Data protection laws like the GDPR might take the position that you should minimise the collection and use of personal data. Many of us might even agree with that position in principle. It can still be complicated to work out what "minimal" actually means if you did have good reasons to collect the personal data in the first place and you might still need to keep the data or some part of it for those purposes or to comply with other laws or regulations.
- _cenw 3y ago
  I don't know where your actual problem is. The GDPR allows holding data for most of these purposes. You intermingled legal obligations with data legal departments would like to hold in the end there. Only one of those is required. Also, some of these are pure theoretical in the EU. You're not even allowed to photocopy an ID in Germany; age verification is a checkmark someone sets upon verifying the ID is valid and then (metaphorically) handing it back, not a copy of a legal document that you probably don't want deduplicated to random S3 buckets held by all the companies you do business with. They're not exactly resistant to replay attacks, after all.
  - Silhouette 3y ago
    I don't know where your actual problem is. My point is that knowing which personal data you need to redact and under which circumstances is not always easy. Before you can build a system that does something you first need to identify exactly what something is required.
- jen20 3y ago
  > How are you going to "fix" that "design flaw" when the personal data in question is the result of legally required customer age checks? Evidence needed to support your tax filings? This kind of wilfully ignorant argument is extremely tedious and indicative of the fact that you do not understand the actual construction of the GDPR, or choose to misrepresent it. Let’s put this nonsense to bed once and for all by quoting the Irish summary [1] of articles 17 and 19: > You have the right to have your data erased, without undue delay, by the data controller, if one of the following grounds applies: > - Where your personal data are no longer necessary in relation to the purpose for which it was collected or processed. > - Where you withdraw your consent to the processing and there is no other lawful basis for processing the data. Information pertinent to tax records is not collected on the basis of consent, and nor is anything else legally required. Now please, just stop. [1]: https://www.dataprotection.ie/en/individuals/know-your-rights/right-erasure-articles-17-19-gdpr https://www.dataprotection.ie/en/individuals/know-your-right...
  - Silhouette 3y ago
    This kind of wilfully ignorant argument This is HN. Please don't post comments with that sort of hostile tone here. Assuming ignorance and/or bad faith does not further constructive or interesting discussion.
    - _cenw 3y ago
      I absolutely agree though, this argument is extremely weak, like a developer being asked to step outside their comfort zone locking up and declaring something unknowable levels of complexity so they don't even have to try. The GDPR is extremely easy to understand. It's not always trivial to comply with, because we all know that enterprises are held together with instant glue, a networking VM in a basement nobody has logged in to for 10 years, at least 3 layers of management between a DPO and feature teams and one all-knowing employee everyone hopes will never leave or take too much vacation because things will slowly crumble in their absence. It's pretty hard to be absolutely compliant in that environment. But if you're a startup, or even solo? You can absolutely design your app to not have these issues in the first place.

If your app doesn't easily support redaction of personal data, you have a design flaw to fix.

by _cenw 3y ago

If your app doesn't easily support redaction of personal data, you have a design flaw to fix.

How are you going to "fix" that "design flaw" when the personal data in question is the result of legally required customer age checks? Evidence needed to support your tax filings? Used to identify and block people who are repeatedly trying to defraud you or breach your security? Subject to a legal hold because it might provide relevant evidence in some legal action between other parties or it's been requested as evidence by some government committee? Data protection laws like the GDPR might take the position that you should minimise the collection and use of personal data. Many of us might even agree with that position in principle. It can still be complicated to work out what "minimal" actually means if you did have good reasons to collect the personal data in the first place and you might still need to keep the data or some part of it for those purposes or to comply with other laws or regulations.

_cenw 3y ago
I don't know where your actual problem is. The GDPR allows holding data for most of these purposes. You intermingled legal obligations with data legal departments would like to hold in the end there. Only one of those is required. Also, some of these are pure theoretical in the EU. You're not even allowed to photocopy an ID in Germany; age verification is a checkmark someone sets upon verifying the ID is valid and then (metaphorically) handing it back, not a copy of a legal document that you probably don't want deduplicated to random S3 buckets held by all the companies you do business with. They're not exactly resistant to replay attacks, after all.
- Silhouette 3y ago
  I don't know where your actual problem is. My point is that knowing which personal data you need to redact and under which circumstances is not always easy. Before you can build a system that does something you first need to identify exactly what something is required.
jen20 3y ago
> How are you going to "fix" that "design flaw" when the personal data in question is the result of legally required customer age checks? Evidence needed to support your tax filings? This kind of wilfully ignorant argument is extremely tedious and indicative of the fact that you do not understand the actual construction of the GDPR, or choose to misrepresent it. Let’s put this nonsense to bed once and for all by quoting the Irish summary [1] of articles 17 and 19: > You have the right to have your data erased, without undue delay, by the data controller, if one of the following grounds applies: > - Where your personal data are no longer necessary in relation to the purpose for which it was collected or processed. > - Where you withdraw your consent to the processing and there is no other lawful basis for processing the data. Information pertinent to tax records is not collected on the basis of consent, and nor is anything else legally required. Now please, just stop. [1]: https://www.dataprotection.ie/en/individuals/know-your-rights/right-erasure-articles-17-19-gdpr https://www.dataprotection.ie/en/individuals/know-your-right...
- Silhouette 3y ago
  This kind of wilfully ignorant argument This is HN. Please don't post comments with that sort of hostile tone here. Assuming ignorance and/or bad faith does not further constructive or interesting discussion.
  - _cenw 3y ago
    I absolutely agree though, this argument is extremely weak, like a developer being asked to step outside their comfort zone locking up and declaring something unknowable levels of complexity so they don't even have to try. The GDPR is extremely easy to understand. It's not always trivial to comply with, because we all know that enterprises are held together with instant glue, a networking VM in a basement nobody has logged in to for 10 years, at least 3 layers of management between a DPO and feature teams and one all-knowing employee everyone hopes will never leave or take too much vacation because things will slowly crumble in their absence. It's pretty hard to be absolutely compliant in that environment. But if you're a startup, or even solo? You can absolutely design your app to not have these issues in the first place.