logoalt Hacker News

shmolyneauxtoday at 2:33 PM3 repliesview on HN

That seems like a GDPR violation waiting to happen. It shouldn't be possible for them to store an email address like that forever and be in compliance.


Replies

kstrausertoday at 2:51 PM

If user [email protected] violates our ToS and I suspend them, I can keep that email address forever to keep them from signing up again. They can’t just say “GDPR! You have to forget me, tee-hee!”

arielweisbergtoday at 4:52 PM

This can be implemented without storing it. They could store a hash. No idea what they actually do.

show 1 reply
silversmithtoday at 6:12 PM

GDPR says you are not allowed to store my data just because. If you have a good enough reason, everything is allowed.