@rrapio @aral @noybeu for a bit I worked for a tech company that handles an enormous amount of traffic and so an enormous amount of data about people's online behavior, tied to IP addresses if not users. They archived data to avoid loss, and did it in a way that deleting PII from the archives when there's a gdpr deletion request would be astonishingly time-consuming and costly, so they didn't. And the data team that was trying to work on some degree of compliance wouldn't touch that