Conversation

Notices

1. Embed this notice
   Em :official_verified: (em0nm4stodon@infosec.exchange)'s status on Thursday, 21-Nov-2024 02:13:58 JST Em :official_verified:

   Tiny Privacy Tip for Developers 🔒✨

   Data deletion is an important
   process for privacy, safety, and respect of consent. It should always be:

   1. User accessible :blocky_white_cursor:

   2. Done thoroughly 🔎

   3. Completed shortly ⏳️

   4. Permanent :nes_fire:

   Unless there is a legal reason for not doing so, this should be a default feature for every software and services storing users data.

   Let’s work together to make sure one day it is.

   #TinyPrivacyTip #Privacy

   • alcinnz repeated this.
   • Embed this notice
     Luis (luism@fosstodon.org)'s status on Thursday, 21-Nov-2024 10:05:36 JST Luis

     in reply to

     @Em0nM4stodon While I do agree with that I think about this for example. What about people who are public figures. For example a member of a party that is stating racist remarks and then tries to delete it. It would be hard to keep accountability wouldn't it?

   • Embed this notice
     alcinnz (alcinnz@floss.social)'s status on Thursday, 21-Nov-2024 10:05:36 JST alcinnz

     in reply to

     • Luis

     @luism @Em0nM4stodon As far as I'm concerned: The public (usually journalists) can take snapshots, and not honer deletion requests.

     Truly thorough deletions is pretty much impossible (once data leaves your systems), but I would advise software developers to come as close as they can. Our systems are used by the powerless more than the powerful.

   • Embed this notice
     Peter Toft Jølving (joelving@mastodon.joelving.dk)'s status on Thursday, 21-Nov-2024 10:06:08 JST Peter Toft Jølving

     in reply to

     @Em0nM4stodon
     Absolutely! 👏

     If I may add, we and our customers are likely already legally required to do so, and it is much, much easier to build this functionality when you still have a clear view of the data in the system, it's processing and flow and it's purposes.

     Take this from someone faced with the enormous task of cataloging PII in a legacy enterprise systems landscape.