News for hackers. Stuff that matters.

A comment on How GDPR Will Change The Way You Develop. Parent comment

Re:How GDPR Will Change The Way You Develop by lawik on Wednesday February 28, 2018 @07:17AM (#16482452)
Do you maintain your database backups indefinitely? If they rotate out after a month or so you will likely be inside the realm of what GDPR considers reasonable compliance. The live data is removed ASAP and the data will rotate out from the backups in a reasonable time frame. At least from the legal advice we've had.

We have no plans to retroactively fix our backups. But we will have to make damn sure that if we need to use a database backup we do not reintroduce user data that we've purged. For that purpose we will have to maintain a list of which users have been purged until the backups rotate out. According to the advice we've had, this is acceptable.

[ Parent | on HN ]
Re:How GDPR Will Change The Way You Develop by ncallaway on Wednesday February 28, 2018 @11:02AM (#16483828)
> But we will have to make damn sure that if we need to use a database backup we do not reintroduce user data that we've purged. For that purpose we will have to maintain a list of which users have been purged until the backups rotate out.

This is the approach we've generally taken as well.

[ Parent | on HN ]