News for hackers. Stuff that matters.
Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by Artemix on Saturday May 19, 2018 @03:29PM (#17109332)
It's quite easy for me.

I don't use any piece of shit like Google Analytics, or tracking services, so that's already a plus.

I don't collect anything I don't explictly need on my users, it's easier to manager, more secure and will make it easier to handle those new laws.

Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by Tomte on Saturday May 19, 2018 @03:34PM (#17109356)
That's great, but totally non-responsive to the question.
Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by kasey_junk on Saturday May 19, 2018 @04:06PM (#17109498)
Right of erasure means you have to delete them on request.

From backups too...

Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by icedchai on Saturday May 19, 2018 @07:21PM (#17110273)
I love seeing the same lie repeated over and over: You do not have to delete them from backups. Anyone wasting time on "rewriting backups" should be fired from their job.

You just need a process in place so you don't restore those same users if ever restoring backups.

Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by kasey_junk on Sunday May 20, 2018 @08:10PM (#17115423)
Interesting. I’ve spent a fair bit of my life lately looking at this problem and come to the opinion that anyone trying to systematically prevent deleted users from being restored should be fired.

Different strokes I suppose.

Can we agree at least that you have to account for deletion in your backup strategy?

Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by icedchai on Monday May 21, 2018 @10:17AM (#17118530)
You should account for deletion, but in general this stuff doesn't keep me up at night.

In the rare event you restore deleted users, and even rarer, if they actually notice, just tell them you screwed up.

Re:Ask HN: How will you comply with GDPR “Right to Erasure”? by cimmanom on Saturday May 19, 2018 @05:04PM (#17109730)
My understanding is that you can refuse to comply with erasure if it's for a "legitimate business purpose." Every company has a legitimate business purpose for backups that aren't kept indefinitely.