3 ms·
To satisfy GDPR requirements when customers leave, you can blank out the PII fields. No need to blow up your application by deleting records.
by rawgabbit 3y ago
To satisfy GDPR requirements when customers leave, you can blank out the PII fields. No need to blow up your application by deleting records.
- taeric 3y agoAlso, a lot of records are the businesses? They may have to remove who it was that they did business with, for compliance, but they do not have to forget that they did business? (Right? Genuine question.)
- rawgabbit 3y agoNot a lawyer. Please consult with one. The general rule is you must comply with all laws and regulations that impacts you. Tax regulations and contract laws and employment laws usually override the duty to delete PII when customers leave. Each set of laws have a generally defined retention period. Please keep in mind each country’s laws are different. Your lawyer can tell you what they are. What that means is if you blank out or anonymize the record you can argue you are satisfying generally accepted record keeping rules. Eg you sold a widget to a person. To satisfy GDPR you just don’t know who they are after so many years.
- taeric 3y agoRight, this matches my understanding. With the same caveats.