Question

A privacy solutions engineer must decommission a customer's data from a multi-tenant SaaS platform where all tenants' encrypted records share the same underlying storage volumes and backup sets. The customer contract requires that their personal data be rendered permanently unrecoverable within 30 days of termination, but physical media cannot be destroyed because other active tenants' data resides on the same volumes. Which approach BEST satisfies the destruction requirement?

Accepted Answer

Cryptographic erasure by securely destroying the tenant-specific encryption keys, provided each tenant's data is encrypted with distinct keys

Answer

Overwrite the storage volumes with multiple passes of random data during the next scheduled maintenance window

Answer

Delete the tenant's database records and remove references from the application index

Answer

Retain the tenant's encrypted data indefinitely and rely on access controls to prevent retrieval