News for hackers. Stuff that matters.

A comment on GDPR Enforcement Tracker: List of GDPR fines. Parent comment

Re:GDPR Enforcement Tracker: List of GDPR fines by londons_explore on Tuesday June 25, 2019 @10:53PM (#20281468)
My guess is a user requested his data deleted, but N26 just disabled the account.

Then the user signed up again, enabling the same account.

The user then saw their old data hadn't in fact been deleted, and complained to the regulator.

[ Parent | on HN ]
Re:GDPR Enforcement Tracker: List of GDPR fines by seqastian on Wednesday June 26, 2019 @03:44AM (#20282707)
Are banks even allowed to wipe your whole account record? They probably have to keep most of it for tax collectors.
[ Parent | on HN ]
Re:GDPR Enforcement Tracker: List of GDPR fines by pluma on Wednesday June 26, 2019 @04:18AM (#20282900)
If they only kept the data that was necessary for legal compliance with tax regulations, they wouldn't have been fined. That's explicitly allowed. That they were fined suggests they just kept everything, far beyond what they had to keep.
[ Parent | on HN ]