Question

A European retail company stores customer profiles and purchase history in Cloud Storage and BigQuery. Under GDPR, customers can submit a 'right to erasure' request requiring the company to delete all their personal data across systems within a defined timeframe. The architect needs a design that guarantees a specific individual's data can be located and permanently removed on demand, while keeping the deletion process auditable. Which approach best supports this compliance requirement?

Accepted Answer

Tag or index all records with a consistent customer identifier, maintain a data map of every location containing personal data, and implement automated deletion jobs that remove or overwrite those records, logging each action to a tamper-evident audit sink.

Answer

Rely on Cloud Storage Object Lifecycle Management to automatically delete all objects after a fixed retention period so personal data is eventually purged.

Answer

Enable CMEK on all buckets and datasets so that data can be rendered inaccessible for individual customers by rotating the encryption key.

Answer

Move all personal data to a single EU region using Organization Policy resource location constraints, ensuring GDPR compliance through data residency alone.