Skip to content

CCPA and GDPR: The Data Center Pitfalls of the ‘Right to be Forgotten’

hard drive destruction

Compliance with the new privacy rules doesn’t always fall on data center managers, but when it does, it’s more difficult than it may sound.

The new set of privacy laws that went into effect in California on January 1 affects companies in and outside of the state – across the US and even around the world. A somewhat similar set of rules went into effect in Europe in 2018. Its effects are also felt well beyond European borders, by all companies above a certain size that provide services to Europeans.

For the most part, these laws are designed to protect individual consumers’ privacy. Both the California Consumer Privacy Act (CCPA) and Europe’s General Data Protection Regulation (GDPR) include the “right to be forgotten.” It entitles every consumer to request that a company delete all the information it has collected about them, with a few exceptions, such as cases where the data needs to be retained to comply with other requirements.

(Link to the article)

Join our newsletter

Schedule a Demo with the Baffle team

Meet with Baffle team to ask questions and find out how Baffle can protect your sensitive data.

Easy

No application code modification required

Fast

Deploy in hours not weeks

Comprehensive

One solution for masking, tokenization, and encryption

Secure

AES cryptographic protection

Flexible

No impact to user experience