News for hackers. Stuff that matters.
Re:ClickHouse, Inc. by kwillets on Monday September 20, 2021 @05:38PM (#28599333)
This question is becoming critical right now, as nonrecoverable deletes are required within 30 days for both GDPR and CCPA.

Most products do the asynchronous rewrite, especially if they're based on immutable storage. That's fine, but it should be tested to verify that it's not triggering on every delete, for example, and that it's resource-efficient.

Re:ClickHouse, Inc. by ec109685 on Monday September 20, 2021 @11:56PM (#28601924)
The other option is to use row level encryption and throw away the keys when a user requests a delete.