Re:GDPR: sorting the fact from the fiction
by Silhouette on Sunday February 11, 2018 @04:04PM
(#16354790)
You can do this without deleting records of transactions with that individual. You would however note that you can no longer identify the buyer because of such request x on date y.
Instant EU VAT law violation if you do this without retaining the required proof of customer location for at least 7 years. Formal tax investigation(s) to follow if you're big enough to be interesting and doing this systematically, possibly by up to 28 different member states' tax authorities depending on how much tax revenue each suspects that you have avoided paying them. Good luck. :-)
If your architecture is solid then these change requests should form part of ongoing BAU, no? Submit change request, develop, test, deploy...
And again I come back to my recurring theme that for many smaller organisations, almost every term you mentioned in that paragraph might as well be written in a foreign language. Small organisations don't have dedicated staff or established formal processes for running a lot of their day-to-day activities, never mind things like regulatory compliance.
Instant EU VAT law violation if you do this without retaining the required proof of customer location for at least 7 years. Formal tax investigation(s) to follow if you're big enough to be interesting and doing this systematically, possibly by up to 28 different member states' tax authorities depending on how much tax revenue each suspects that you have avoided paying them. Good luck. :-)
If your architecture is solid then these change requests should form part of ongoing BAU, no? Submit change request, develop, test, deploy...
And again I come back to my recurring theme that for many smaller organisations, almost every term you mentioned in that paragraph might as well be written in a foreign language. Small organisations don't have dedicated staff or established formal processes for running a lot of their day-to-day activities, never mind things like regulatory compliance.