← Graph

How to comply with right-to-be-forgotten given future quantum computers?

question 2 connections

Audience member cites a lawyer arguing encrypt-and-lose-key is insufficient because future quantum computers may decrypt archived data. Davydov agrees but notes quantum computers will create many other problems too. A follow-up comment from the audience describes a Polish banking production practice borrowed from blockchain: store payloads separately from the event log, keep only fingerprints inside events to prove immutability, and delete the payload when requested — if an event later refers to a deleted payload, return 'sorry, deleted'.

answer_summary
Encrypt-and-lose-key may not survive quantum computing. Alternative from Polish banking/blockchain production: store payloads separately, keep fingerprints in events, delete payloads on request.
question How to comply with right-to-be-forgotten given future quantum computers?
about
Event Sourcing concept
Concerns GDPR compliance in immutable event-sourced systems.
question How to comply with right-to-be-forgotten given future quantum computers?
asked_at
Audience question during the talk's Q&A.

Provenance

Read by
1 extraction