News for hackers. Stuff that matters.
Re:Atlassian: We estimate the rebuilding effort to last for ... by Gigachad on Monday April 11, 2022 @07:45PM (#30996703)
The law isn't a technical specification. You have to follow the spirit of the law. A soft deleted_at timestamp wouldn't be following the law in good faith. Having some data stuck in an unmapped section of an ssd would be within the spirit.
Re:Atlassian: We estimate the rebuilding effort to last for ... by nwallin on Monday April 11, 2022 @08:14PM (#30996941)
IANAL, but IMHO a soft 'deleted_at' timestamp along with a daily cron job that hard deletes everything with a deleted_at older than 24 hours would fall within the spirit of the law.

I agree that just having a deleted_at timestamp and old entries are never pruned would not be a good faith interpretation of the law.

Re:Atlassian: We estimate the rebuilding effort to last for ... by Gigachad on Monday April 11, 2022 @08:34PM (#30997106)
From what I have seen, there is no requirement for instant deletes. Even emailing a support address and having them manually delete the data is acceptable. Most places using deleted_at never clean up the data from what I have seen though.