4 ms·

Didn’t seem sufficient to me at all, but I’m happy to be proven wrong.

• Raidion 2y ago
  I work for a company managing a team that has built this for GDPR compliance. Customer submits a deletion request. We have a fan out process that takes the deletion request and submits it to a bunch of different data locations. All of these must respond within 2 days (though the required time is 72h). Each of those data locations will queue up a job to remove access (soft delete) the data, and schedule a hard delete for 28 days in the future. If the customer says they don't actually want the data to be deleted, we cancel the data hard deletion and revert the soft delete. If nothing happens the hard deletion goes through.
  • anyfoo 2y ago
    Thanks, that’s insightful. In this case, it seems sensible to me at least.