Yes and no. PII needs to be removed. The rest of the data needs to be anonymized... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

tomwojcik on April 28, 2020 | parent | context | favorite | on: Instead of deleting account, NYT appends ‘1000’ to...

Yes and no. PII needs to be removed. The rest of the data needs to be anonymized. Right?

Dahoon on April 28, 2020 [–]

But an email is PII so clearly this would breach GDPR.

ericd on April 28, 2020 | [–]

Keep a hash instead of the original email address?

cryptonector on April 28, 2020 | | [–]

Whatever for? Just delete it. Keep the account tombstoned so its name can't be reused. Keep what content you can and want. Delete the PII and any metadata you're contractually and/or legally required to.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact