Re:EU GDPR – Another reason for SaaS to reconsider on-premise
by heavenlyblue on Tuesday March 27, 2018 @11:13AM
(#16689247)
Those companies lie in their reply to you saying that they hold no information. They someone leaks the fact that they actually do hold your information; authorities organise a warrant to dump all of their hardware and realise the company was illegally collecting data. They end up in court.
So how to get my PII deleted from FB's servers, for example? FB mines other people's phones for this data continuously, so will they setup a blacklist, so that my phone number will not get mined ever again from other people's phones? Blacklist will have to contain my phone number in order to work. Somewhat self-defeating. Hashing will not do much, because the search space is so small.
Also, they may have my phone, and some guess at my identity. Providing a much stronger link between my identity and my various other identifying information (phone no, emails, ...) to random shady companies and hoping they'll use it to delete data they may have on me... uh. It does not add up to something sensible.