Hacker News Reader

> wipe out data per-request

Why would you do that? You are providing a service to the people that is a pure benefit for them and doesn't harm them at all. Why would anyone want to delete such helpful data?

View on HN

If they don't want a € 10 million fine they have to comply with GDPR, even if no one is going to use it.

AFAIK, GDPR doesn't tell you there need to be an automated way to delete the data. If people can send you a mail with the request and you manually delete it, that's also fine. So if no one will use it, you basically don't have to do anything and be compliant (to this specific GDPR rule).

Sure, but if people use your service and some 0.01% of them might send a request just as a matter of principle once GDPR kicks in, then it's quite plausible that the cost efficient way to handle this is to have an automated solution rather than a manual process that doesn't scale.

From what I understand, as long as you can say there's a process in place (and could actually follow it) then you're compliant with the GDPR.

Reply on news.ycombinator.com