[jacquesm]

I hate to be that guy but did you actually read the comment? It said "after". So not the moment he signed in, 15 minutes after where to all intents and purposes that should have been impossible.

After all, we can sign people up in 20 milliseconds, I don't see why marking an account as in the process of deletion should be so hard.

[klyrs]

Many large sites do batched emails -- it's fully plausible that the email sat in a queue for 15 minutes before going out.

[socksy]

GDPR allows up to a month (or more in special circumstances) to delete the account:

> The controller shall provide information on action taken on a request under Articles 15 to 22 to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic form means, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject

Article 12.3 https://gdpr-info.eu/art-12-gdpr/

[dathinab]

Dispatched != Send != Received

Through I could have been more clear.

Also like I mentioned GDPR doesn't require fast deletion practically delaying the deletion by a day is totally legal as far as I know.

There is another law wrt. opting out from mail under which you maybe (just maybe) could argue it being illegal.

But then again you can always argue there was a delay between dispatch and sending.