Re:The ransomware surge
by closeparen on Saturday May 01, 2021 @02:15AM
(#27003737)
That’s all well and good for weather data, but if anything in your backup is in any way related to user behaviors or transactions, immutability is a crime.
[ Parent
| on HN ]
Immutability in this context doesn't mean "kept forever", it just means the permission to hard-delete is separate from soft-delete.
GDPR requires that good data-stewards keep backups:
the controller and the processor shall implement... the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident
https://gdpr-info.eu/art-32-gdpr/
For more details on GDPR and backups, see https://www.backup-systems.co.uk/blog/6-gdpr-implications-on...
It would be inappropriate, for instance, to store user data on the blockchain.
Re:The ransomware surge
by closeparen on Saturday May 01, 2021 @03:56PM
(#27009274)
It also requires that user data can be hard-deleted on command. The ability to wipe data from backups needs to be kept close at hand.