How exactly do you "forget" the data on the logs?
One interesting solution that kills two birds with one stone is if you encrypt the personally identifiable information then delete the private key if there is a request to be forgotten. Has the added benefit of also effectively destroying the data in backup copies too.
If we think around the options, you can have either:
i) eventual deletion (log retention policy) ii) compacted topics (and push null values) iii) expensive re-processing of the entire log iv) expensive segment re-write operation
with each option bringing in a new set of challenges
https://law.stackexchange.com/questions/23375/gdpr-general-d...
I believe it would be, but IANAL.
We've just hacked your server and wiped the crypto keys for your users. As you know, all your backups are now useless.
Send us $1 million in Bitcoin to get your crypto keys back.
Sincerely,
Hacker McHackface