News for hackers. Stuff that matters.

A comment on GDPR After One Year. Parent comment

Re:GDPR After One Year by detaro on Saturday May 25, 2019 @12:43PM (#20009965)
> I can't go to my school or a credit bureau or an insurance company and say that all my past history should be forgotten. Why should we enforce such a regulation online?

GDPR makes no difference between online and offline businesses: They can keep data if they have a proper justification for it.

[ Parent | on HN ]
Re:GDPR After One Year by fromMars on Saturday May 25, 2019 @02:19PM (#20010408)
What constitutes proper justification for keeping information?
[ Parent | on HN ]
Re:GDPR After One Year by detaro on Saturday May 25, 2019 @02:25PM (#20010441)
https://gdpr-info.eu/art-6-gdpr/ is the core list of reasons for data processing, any company needs to justify its data usage based on them. (Case a., consent, is a bit special, other articles put clear limitations on it so it isn't abused, make it revocable, ...)
[ Parent | on HN ]