News for hackers. Stuff that matters.

A comment on Instead of deleting account, NYT appends ‘1000’ to username and email address. Parent comment

Re:Instead of deleting account, NYT appends ‘1000’ to userna... by tomwojcik on Tuesday April 28, 2020 @02:13PM (#23010001)
Yes and no. PII needs to be removed. The rest of the data needs to be anonymized. Right?
[ Parent | on HN ]
Re:Instead of deleting account, NYT appends ‘1000’ to userna... by Dahoon on Tuesday April 28, 2020 @04:29PM (#23011558)
But an email is PII so clearly this would breach GDPR.
[ Parent | on HN ]
Re:Instead of deleting account, NYT appends ‘1000’ to userna... by ericd on Tuesday April 28, 2020 @05:05PM (#23012026)
Keep a hash instead of the original email address?
[ Parent | on HN ]
Re:Instead of deleting account, NYT appends ‘1000’ to userna... by cryptonector on Tuesday April 28, 2020 @06:14PM (#23012789)
Whatever for? Just delete it. Keep the account tombstoned so its name can't be reused. Keep what content you can and want. Delete the PII and any metadata you're contractually and/or legally required to.
[ Parent | on HN ]