Hacker News new | ask | show | jobs
by Drdrdrq 2170 days ago
I understand the benefits of this feature for audits, but how does one deal with GDPR requirements? Is there some way to alter historic data to remove PII, or should the affected columns be excluded?
3 comments

Possibly the idea of "crypto-shredding" could apply, where the PII values are encrypted and you throw away the key if you get a delete request.
You can't alter historic data, but you can include or exclude just selected columns from versioning. You can also purge all history by date range, but not apparently just the history for a given record.
There are gdpr exceptions for use cases like audit trails, so if there is a requirement to keep the data, you can.

It’s an excellent point to be aware of.