In response to
"One of the GDPR rules is for "data portability". So when a service shuts down or shits the bed or whatnot, users aren't left in the lurch."
by
Beryllium
|
Regarding the right to be forgotten, it is sufficient for you to anonymize the data.
Posted by
Fuzzy (aka mrfuzzy)
Jul 15 '23, 16:56
|
You could replace the user for all of my posts with the username "Forgotten 01", for example.
The portability requirement is more tricky. Honestly I'm not sure that requirement has really been tested from a regulatory standpoint. I'm not sure that anyone has actually solved for that question yet - if I ask Facebook for my info, will it be in any sort of usable format? Who knows.
IANAL, but I was a privacy officer for a global fintech for a couple of years.
|
Responses:
|