News for hackers. Stuff that matters.

A comment on The Nightmare Letter: A Subject Access Request Under GDPR. Parent comment

Re:The Nightmare Letter: A Subject Access Request Under GDPR by r00fus on Sunday March 18, 2018 @02:12PM (#16613321)
So why not log just username or transaction id?
[ Parent | on HN ]
Re:The Nightmare Letter: A Subject Access Request Under GDPR by sobani on Monday March 19, 2018 @04:14AM (#16616798)
Because usernames are PII under de GDPR too.
[ Parent | on HN ]
Re:The Nightmare Letter: A Subject Access Request Under GDPR by r00fus on Monday March 19, 2018 @12:35PM (#16619790)
True, but hidden IDs like the row GUID of the user are not, are they? They should be considered more like pseudonymous data[1] as they're meaningless outside the dataset.

[1] https://www.whitecase.com/publications/article/chapter-5-key...

[ Parent | on HN ]