Curtis and Prasanna discuss the very difficult problem of “forgetting” someone using a backup system that is fundamentally designed to remember. This is a direct conflict between GDPR/CCPA and backup. It’s one thing to delete a single file that relates to a subject; how do you delete records within a database within a database backup. Set aside how fundamentally difficult it is – you’re messing with the fundamental purpose of backups.
----- Signature and Disclaimer -----
Written by W. Curtis Preston (@wcpreston). For those of you unfamiliar with my work, I've specialized in backup & recovery since 1993. I've written the O'Reilly books on backup and have worked with a number of native and commercial tools. I am now Chief Technical Evangelist at Druva, the leading provider of cloud-based data protection and data management tools for endpoints, infrastructure, and cloud applications. These posts reflect my own opinion and are not necessarily the opinion of my employer.