How to solve data retention Challenges in Cloud ?
Crypto-shredding is the practice of 'deleting' data by deliberately deleting or overwriting the encryption keys.This requires that the data have been encrypted. Data may be considered to exist in three states: data at rest, data in transit and data in use.
Crypto-shredding is the deletion or overwriting of the encryption keys that give access to encrypted data. Destroying the key to the encrypted data means it cannot be accessed and that data is effectively deleted because it is unreadable.
Drawback of Crypto-Shredding:
Under Article 17 of the GDPR, also referred to as ‘the right to be forgotten’, data subjects can request that all their personal data be deleted and cease to be processed. The request must be fulfilled completely and with ‘undue delay’.
crypto-shredding is only as effective as the encryption service used to protect the data in the first place. With cyberattacks becoming more sophisticated year on year, crypto-shredding may not be the most future-proof solution if encrypted data can be hacked
Reference: