News for hackers. Stuff that matters.

A comment on PSA: HelloFresh doesn't delete data when asked, only changes the email address. Parent comment

Re:PSA: HelloFresh doesn't delete data when asked, only chan... by otterley on Thursday May 26, 2022 @09:13PM (#31525118)
If the records no longer contain PII, then they've arguably satisfied their duties under the law, haven't they? Has a court held otherwise?
[ Parent | on HN ]
Re:PSA: HelloFresh doesn't delete data when asked, only chan... by oliwarner on Friday May 27, 2022 @02:01AM (#31526458)
But the records do.

> Your account showing your name, address, credit card, etc can still be accessed whilst the token stored in the cookie is still valid

[ Parent | on HN ]
Re:PSA: HelloFresh doesn't delete data when asked, only chan... by zbuf on Friday May 27, 2022 @09:19AM (#31529269)
They're also given time for the deletion to be fully complete -- backups etc.. That could apply here.
[ Parent | on HN ]