Databases · Senior · Question 70 of 75
A user asks to delete all their personal data (GDPR). What's often overlooked?
- 1Nothing: deleting the user row is enough
- ✓Correct answer: Copies in backups, replicas, logs, analytics, caches and search indexes, which need their own retention or deletion process
- 3Deleting the primary key index
Explanation
Common approaches: limited backup retention, crypto-shredding (deleting a per-user encryption key) and pseudonymizing data in analytics.