Details
-
New Feature
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
-
None
Description
System Versioning is a great feature, but it currently has a major drawback: it cannot be used to store personal/sensitive data in a GDPR / DSGVO compliant way. GDPR / DSGVO define a "right to be forgotten" (https://gdpr-info.eu/art-17-gdpr/), which means a person's data must be deleted on that person's request. A DELETE on a system versioned table does not truly delete data, as it will still be accessible via SELECT ... FOR SYSTEM_TIME .... Even if it will not be visible to the application any more - in case of a break-in, data that should not even exist could be captured by black hats, resulting in huge fines for us.
It would be great to allow DELETE ... FOR SYSTEM_TIME ALL (or some other syntax), meaning that the specified rows will be wiped from history. Of course, this feature would have to be enabled explicitly through a system variable (maybe "system_versioning_delete_from_history").
Attachments
Activity
Field | Original Value | New Value |
---|---|---|
Labels | system_versioned_tables |
Component/s | Versioned Tables [ 14303 ] |