Re:GDPR – A Practical Guide for Developers (2017)
by nokcha on Saturday March 03, 2018 @01:51PM
(#16510844)
What if the purpose of the archiving is to not only record what was changed but also who changed it?
[ Parent
| on HN ]
Re:GDPR – A Practical Guide for Developers (2017)
by marten-de-vries on Saturday March 03, 2018 @03:15PM
(#16511322)
From the GDPR, recital 45:
> [...] where processing is necessary for the performance of a task carried out in the public interest [...] the processing should have a basis in Union or Member State law.
I don't think that purpose of archiving has a basis in law.
That said, I do remember my law professor calling the 'right to be forgotten' one of the weaker parts of the GDPR, and I'm not an expert, so it's possible I'm missing something.