Re:PSA: HelloFresh doesn't delete data when asked, only chan...
by rrobukef on Friday May 27, 2022 @01:11AM
(#31526200)
Encrypted archival of PII for a limited time, say a year. GDPR allows the storage for legal reasons.
A one way hash of PII, salted, stretched, this is enough to verify identity but also doesn't keep the PII directly (I know only 8 billion people on earth is not enough entropy. Still you make a legal effort and segregate it from your network)
A one way hash of PII, salted, stretched, this is enough to verify identity but also doesn't keep the PII directly (I know only 8 billion people on earth is not enough entropy. Still you make a legal effort and segregate it from your network)