You are reading a single comment by @Greenbank and its replies. Click here to read the full conversation.
  • One of the hardest bits is implementing the right to be deleted alongside keeping backups. If someone wants to be deleted you don't have to delete them from all of your existing backups, you just have to make sure you delete the data of those individuals should you ever restore a backup.

    This means you end up having to keep a list of identifiers (and not one that can identify an individual otherwise you're back to square one) and have a process to apply that deletion after a backup restore.

    And hopefully the backups that do contain their personal data will eventually be deleted (replaced by backups that no longer contain that data). Eternal backups are a bad thing.

About

Avatar for Greenbank @Greenbank started