Soft deletion probably isn't worth it

Re:Soft deletion probably isn't worth it by avianlyric on Tuesday July 19, 2022 @07:18PM (#32159234)

Sure, but that time period is usually limited to 30 days, with an additional 30 day extension allowed if you contact the person and tell them you need more time.

You can’t just declare that it take years to delete data, GDPR sets reasonable limits on how long a company can delay true deletion.

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by EUROCARE on Tuesday July 19, 2022 @08:01PM (#32159586)

Even if the company just issued you an invoice, that makes it obligated by law to hold onto your PII for the next 5 years - and GDPR of course has an exception for that.

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by avianlyric on Wednesday July 20, 2022 @08:16PM (#32174196)

Sure, but that data doesn’t fall under your right-to-be-forgotten, so any obligations that apply to the right-to-be-forgotten are irrelevant.

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by LunaSea on Tuesday July 19, 2022 @07:27PM (#32159302)

The GDPR gives limits on answering, I'm not sure it gives a limit on actually deleting the data everywhere.

Various types of data have various retention times for various reasons, some being legal reasons.

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by yuliyp on Wednesday July 20, 2022 @02:32AM (#32162237)

The GDPR says it's 30 days with a 2 month extension. This allows for having safe soft deletion and backup retention policies without running afoul of it.

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by telotortium on Wednesday July 20, 2022 @02:45AM (#32162340)

Do you have a link for that?

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by yuliyp on Wednesday July 20, 2022 @07:13PM (#32173655)

https://gdpr.eu/article-12-how-controllers-should-provide-pe... section 3

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by telotortium on Thursday July 21, 2022 @12:09AM (#32175690)

Thanks!

[ Parent | on HN ]

Re:Soft deletion probably isn't worth it by M2Ys4U on Wednesday July 20, 2022 @06:05AM (#32163560)

The GDPR says data should be deleted "without undue delay", it doesn't give a hard deadline.

[ Parent | on HN ]