Re:Apple requires account deletion within apps in AppStore s...
by jaywalk on Wednesday October 06, 2021 @04:03PM
(#28777703)
If the personal data is encrypted and you destroy the only key that can be used to decrypt it, is it still personal data? Or is it now simply some random bytes?
[ Parent
| on HN ]
Re:Apple requires account deletion within apps in AppStore s...
by mike_d on Wednesday October 06, 2021 @06:13PM
(#28779155)
I had this exact question for our privacy legal team and the answer I got was that deleting the keys to encrypted data is legally equivalent to deleting the data itself.
Re:Apple requires account deletion within apps in AppStore s...
by cygned on Wednesday October 06, 2021 @04:14PM
(#28777846)
We built a system that creates backups of PII using that mechanism; throw away the key after data is supposed to be deleted. That is legal under EU GDPR.
Re:Apple requires account deletion within apps in AppStore s...
by arthur_sav on Wednesday October 06, 2021 @06:09PM
(#28779108)
What's funny is that all these laws and (appstore) rules are not very well thought.
It comes down to the individual to interpret and enforce a solution that may or may not be in compliance.
It's like doing taxes in the US. You may or may not doing it correctly and you'll only find out if they start knocking.