10. of Retention/Removal
We cannot remove personal data, as the database schema requires the data to be there.
|
Threat |
|
|
|
You’re linking personal data to orders in your system and, because of referential integrity constraints, removing a customer would also remove their orders and the products they ordered from the database. |
|
GDPR |
Chapter 3, Art. 17 – 1. (b) |
|
CCPA & CPRA |
CCPA 1798.105. Consumers’ Right to Delete Personal Information (c) (1) CCPA 1798.125. Consumers’ Right of No Retaliation Following Opt‐Out or Exercise of Other Rights (b) (1) |
|
OECD |
N/A |
|
Mitigations |
|
|
| |
