API Testing · Senior · Question 27 of 75
How should a GDPR data deletion request be tested end to end?
- 1The user's row is removed from the main database table only
- 2Data is removed or anonymized in every service, cache and index
- 3The API returns 200 for the deletion endpoint, and nothing more
Show the answer
Correct answer: Data is removed or anonymized in every service, cache and index
Explanation
Personal data spreads to search indexes, analytics, logs and other services. Tests follow it everywhere the data map says it lives.