Hacker News Reader

Disingenuous as always. Gdpr requires a maximum grace period of 30 days to comply with the erase request. Facebook holds your stuff for 90 days. Just as an example. Data management is just a part of the law, by the way. Facebook is currently not complying with all the obligations about privacy by design and defaulting to opt-out.

View on HN

But that's easy to get into compliance, just adjust a setting from 90 to 30.

You also need to make sure you implement true deletion instead of a DB flag (and still use that stuff on the backend).

And that's not even getting into logs or backups, which will probably be a problem to delete from for smaller companies (since I'm assuming that facebook couldn't keep logs or backups for 30 days since that would be massive)

Reply on news.ycombinator.com