Could the NSA, or a new owner, recover the data?
by mdhealy
In reply to
Just what constitutes del ...
Just what constitutes deletion of sensitive data for the client.
This may seem like a question but it does not have a specific answer (at least I don't think so) so I was hoping to get some alternative opinions on it.
The Company I work for has many customers that use our website to register for various programs that we host, and everything from name and contact info to dietary restrictions is sent to us using all the fancy cert encrypted site logins and blah blah blah, the data is then stored in an encrypted format within a SQL database for the duration of the event login and completion.
We always purge the database at the end of the event as the customer requests.
What has currently been posed as a question to me by my VP is...what do we do with the copy of the database that is on backup media.
My answer is simple, I stated that since the data is not in a live format and is kept in our protected safe so we are good to call the data purged.
Does anyone know differently, should I be selectively purging this info form my tapes or am I correct in my statements?
Cheers,
Tom
This conversation is currently closed to new comments.