Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
1–10 of 35 posts
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#2Demo goes to 502 bad gateway ;\
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#3> and you still need to consult with an attorney specializing in privacy.
Governments should be refunding solicitor costs to anyone needing GDPR advice. Otherwise this is just another way to add barriers. If you are on modest income you can forget about setting up a website in the EU.
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#4> and you still need to consult with an attorney specializing in privacy. Governments should be refunding solicitor costs to anyone needing GDPR advice. Otherwise this is just another way to add barriers. If you are on modest income you can forget about setting up a website in the EU.
The law is quite readable, and the various Data Protection Agencies (country-specific regulators) have provided more concrete guidance. If you're setting up a website that takes a restrained approach to personal data, you don't necessarily need an attorney.
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#5Nice project, although I have question I would appreciate someone can answer.
How does in real world "right to forget" works. What is confusing part for me that data that identify you are also required for the business, so how do you draw line what can be forgotten and what cannot. Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data I sign up again and repeat the entire thing?
Second, how does that work in regards to book keeping and tax policies, where you are required to have data about your clients?
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#6Nice project, although I have question I would appreciate someone can answer. How does in real world "right to forget" works. What is confusing part for me that data that identify you are also required for the business, so how do you draw line what can be forgotten and what cannot. Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data…
The right to erasure (aka the right to be forgotten) is not universal and only applies in certain circumstances.
> Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data I sign up again and repeat the entire thing?
In this case a business (or 'data controller' in GDPR lingo) can use 'legitimate interest' as a lawful basis for processing the users information. Of course the data you kept would have to be proportional to what you're doing. For example, it would be hard to argue that you needed to keep the users billing address history if your services used a simple email black list (this is the 'data minimisation' principle).
> how does that work in regards to book keeping and tax policies, where you are required to have data about your clients?
As a rule of thumb, if you're using some personal data to comply with another piece of law then that usage is generally exempt from GDPR.
Source: https://ico.org.uk/for-organisations/guide-to-data-protectio...
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#7Nice project, although I have question I would appreciate someone can answer. How does in real world "right to forget" works. What is confusing part for me that data that identify you are also required for the business, so how do you draw line what can be forgotten and what cannot. Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data…
The right to erasure (aka the right to be forgotten) is not universal and only applies in certain circumstances. > Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data I sign up again and repeat the entire thing? In this case a business (or 'data controller' in GDPR lingo) can use 'legitimate interest' as a lawful basis for processing…
Thanks.
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#8Demo goes to 502 bad gateway ;\
Hi, The demo is fixed now.
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#9Hi guys,
Project demo is back to life. Project demo is available at:
User account: Phone: 4444 Code: 4444
Admin access token: DEMO
Many more info is available at:
Re: Show HN: Databunker – a GDPR compliant, secure storage for personal data (PII)
#10Nice project, although I have question I would appreciate someone can answer. How does in real world "right to forget" works. What is confusing part for me that data that identify you are also required for the business, so how do you draw line what can be forgotten and what cannot. Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data…
The right to erasure (aka the right to be forgotten) is not universal and only applies in certain circumstances. > Let say I use some service, then I violate policies of that company, then I exercise my "right to forget", and after they delete my data I sign up again and repeat the entire thing? In this case a business (or 'data controller' in GDPR lingo) can use 'legitimate interest' as a lawful basis for processing…
That does get complicated in the real world. You might need to retain some data for potential future refunds, for example. But perhaps the application that does refunds also does the loyalty program, and the internals of the app aren't always separate enough that you can delete/obfuscate/whatever info from just the loyalty part.