Hacker News Reader

Are you sure about throwing away encryption keys is sufficient to be GDPR complient? Does this comes from IP lawyer as well?

If the information no longer is possible to decrypt, it would no longer be considered personal data.

That's a good thing to point out, thanks. No, I'm afraid that bit is my own speculation.