News for hackers. Stuff that matters.

A comment on Apache Kafka and GDPR compliance. Parent comment

Re:Apache Kafka and GDPR compliance by nerpderp83 on Monday December 04, 2017 @04:28PM (#15847674)
Encrypt with a user specific key when the data enters the log. You can effectively delete all the user specific data by throwing the key away. No tracking down files or reprocessing necessary.
[ Parent | on HN ]
Re:Apache Kafka and GDPR compliance by mk89 on Tuesday December 05, 2017 @03:24AM (#15850541)
Today’s encryption is strong. Who knows about tomorrow?
[ Parent | on HN ]
Re:Apache Kafka and GDPR compliance by pcl on Monday December 04, 2017 @04:53PM (#15847906)
Is that acceptable within GDPR requirements?
[ Parent | on HN ]
Re:Apache Kafka and GDPR compliance by nerpderp83 on Monday December 04, 2017 @05:24PM (#15848120)
https://en.wikipedia.org/wiki/Crypto-shredding

https://law.stackexchange.com/questions/23375/gdpr-general-d...

I believe it would be, but IANAL.

[ Parent | on HN ]
Re:Apache Kafka and GDPR compliance by tscs37 on Tuesday December 05, 2017 @12:25AM (#15849929)
The GDPR contains exceptions when deleting individual user data is infeasible or if the data in question is a backup, in which case you must only keep a log somewhere so you don't forget to delete again.
[ Parent | on HN ]