This article examines three recurring database-layer failures documented in the EDPB’s 2026 enforcement findings: the complexity of executing erasure across relational schemas, the backup paradox that can silently undo compliant deletions, and the audit log contradiction that traps organizations between two competing obligations.
2026-07-14 (first published: 2026-07-13)
I have worked in more than one regulated industry, and since the banking crisis of 2008, I have witnessed a sea change in the approach to regulation. The UK Financial Services Authority (FSA) was seen to be a toothless tiger. The UK government replaced the FSA with two separate bodies, each with its own more […]
2021-10-25
1,670 reads
This week Grant talks about the need for change and growth to adapt to the changing world.
2019-12-21
282 reads
There is a page where GDPR fines are tracked. None of us want to get on that page.
2019-08-22
509 reads
The way we look at data is changing, especially when data privacy and protection is considered. Today Steve has some thoughts on address data and the implications for cities as well as databases.
2025-04-11 (first published: 2019-07-16)
516 reads
The GDPR is struggling with enforcement against some of the larger tech companies. Steve thinks this is a problem, but it might not matter for smaller companies.
2019-05-09
542 reads
We don't have strong data consent rules in the US, but Steve thinks we should.
2019-04-23
295 reads
More and more data is being captured and analyzed all the time. At the same time, there are varying expectations of privacy that aren't always shared between the subjects of data and the collectors. Steve has a few thoughts on how this will play out for data professionals.
2019-04-18
371 reads
Now that the GDPR has gone into effect, many are wondering what will happen in the United States. California is the first state to enact similar legislation, called the California Consumer Privacy Act of 2018 (CCPA). In this article, William Brewer explains the history of the law, what it means for companies doing business with California residents, and how it compares to the GDPR.
2018-10-11
2,871 reads
Since the GDPR has gone into effect, the focus has often been on databases. There are many other ways that personally identifiable data may be stored by an organization. In this article, David Poole shows how to use Bash and PowerShell to locate that data in file shares
2018-10-01
2,535 reads
By Steve Jones
semaphorism – n. a conversational hint that you have something personal to say on...
This week I was at PASS Data Community Summit in Seattle, and I attended...
By James Serra
(This is the third post in a three-part series on how AI is changing...
Comments posted to this topic are about the item Pay for Performance, which is...
Telp/Wa 628218200203 Jl. Jend. Sudirman No.49-51, Terban, Kec. Gondokusuman, Kota Yogyakarta, Daerah Istimewa Yogyakarta...
Telp/Wa 628218200233 Jl. MT. Haryono No.2, Jengglong Timur, Purwodadi, Kec. Purwodadi, Kabupaten Grobogan, Jawa...
I have a table, dbo.bittest, where I am testing an application response. This has this structure:
CREATE TABLE [dbo].[BitTest] ( [insertdate] [datetime] NULL CONSTRAINT [DF__BitTest__insertd__300F11AC] DEFAULT (getdate()), [a] [bit] NULL ) ON [PRIMARY] GOMy application runs this code:
INSERT dbo.BitTest
(
insertdate,
a
)
VALUES
(DEFAULT, 'true')
GO
See possible answers