Facebook urged to make GDPR its “baseline standard” globally

Re:Facebook urged to make GDPR its “baseline standard” globally by leesalminen on Monday April 09, 2018 @11:51AM (#16794049)

What about deleting data in backups for an EU resident who submitted a request for data deletion? If a company is using mysqldump or equivalent it seems difficult to just drop certain records from those .sql files.

[ Parent | on HN ]

Re:Facebook urged to make GDPR its “baseline standard” globally by jumpkick on Monday April 09, 2018 @12:56PM (#16794736)

Have a reasonable retention policy on these backups. Backups are a "legitimate business interest" and you don't need to purge "right to be forgotten" requests from your backups if you stick to a reasonable and publicly-documented retention policy. This is advice that I've received from counsel. However, I am not a lawyer, and this in no way should be taken as legal advice.

[ Parent | on HN ]

Re:Facebook urged to make GDPR its “baseline standard” globally by cobbzilla on Monday April 09, 2018 @01:52PM (#16795243)

If you ever had to restore from backup, I hope you kept track of what content now needs to be "re-forgotten"

[ Parent | on HN ]

Re:Facebook urged to make GDPR its “baseline standard” globally by leesalminen on Monday April 09, 2018 @03:12PM (#16796005)

We received similar advice from our legal counsel, but got stuck on this implementation detail.

[ Parent | on HN ]

Re:Facebook urged to make GDPR its “baseline standard” globally by chinathrow on Monday April 09, 2018 @11:55AM (#16794103)

Difficult yes, impossible not.

[ Parent | on HN ]

Re:Facebook urged to make GDPR its “baseline standard” globally by leesalminen on Monday April 09, 2018 @03:12PM (#16795996)

Of course. For us, it came down to cost. EU customers make up <1% of our revenue. Implementing this non trivial feature didn’t make sense for us financially. So, we decided to drop all EU customers entirely.

[ Parent | on HN ]