News for hackers. Stuff that matters.
Re:Prompt injection explained, with video, slides, and a tra... by TeMPOraL on Saturday May 13, 2023 @04:35PM (#35932430)
GDPR only affects data you shouldn't have or keep in the first place.
Re:Prompt injection explained, with video, slides, and a tra... by detaro on Saturday May 13, 2023 @04:39PM (#35932464)
No, it really doesn't. E.g. deletion of data about a contract or account that just expired (or expired <mandatory-retention-period months ago>) is data you were totally fine/required to have, but can't be deletion that can be rolled back long-term.
Re:Prompt injection explained, with video, slides, and a tra... by SgtBastard on Saturday May 13, 2023 @05:39PM (#35933022)
Section 17 (Right to be forgotten) 1a and 1b both refer to situations where there was a legitimate need to process and/or keep a subjects data.

https://gdpr-info.eu/art-17-gdpr/

Implementing this as a rollback-able delete will not be compliant.