Re:Black Hat: GDPR privacy law exploited to reveal personal ...
by JumpCrisscross on Friday August 09, 2019 @03:21PM
(#20657504)
> The GDPR recitals do not recommend gathering additional data solely to be able to fulfill these requests
One, these are non-binding recitals.
Two, the conflict between (a) data-furnishing requirements and (b) advice against retaining data that would validate the requestor is exactly the point of this post.
One, these are non-binding recitals.
Two, the conflict between (a) data-furnishing requirements and (b) advice against retaining data that would validate the requestor is exactly the point of this post.