System Design · Senior · Question 64 of 75

How can you honor "right to be forgotten" requests when personal data lives in immutable event logs and backups?

✓Correct answer: Crypto-shredding: encrypt each user's data with a per-user key and delete the key to make the data unreadable
2Rewrite all backups every day
3Ignore immutable stores

Explanation

Keeping personal data out of event payloads (storing references instead) also helps.

Further reading

Test yourself

Take the System Design · Senior quiz: questions and options are shuffled, and you get a review of your mistakes at the end.