Operating Theory · 2026-09-15
Backups are usually out of scope, and usually full of the data
Retention and deletion policies often exclude backups for practical reasons. The exclusion is defensible. Leaving it unstated in the notice is not.
Under the pillar The dangers of data privacy theatre
The tension
Immutable backups help security and complicate privacy. The same property that stops an attacker from deleting data also stops the organisation from deleting it. This is a genuine engineering problem.
The research question is which architectures resolve it honestly, for example crypto-shredding with per-subject keys, and what those approaches cost in recovery complexity.
Put this to work
Backups are usually out of scope, and usually full of the data challenge record
Test the claim behind Backups are usually out of scope, and usually full of the data against a real case and look for where it fails.
- For
- Practitioners, researchers, founders, and operating leaders.
- What you keep
- A backups are usually out of scope, and usually full of the data challenge record you can review, revise, and send.
- What counts as sound
- Makes the claim testable
- Includes contrary evidence
- Preserves competing explanations
- States uncertainty
- Names what would change the conclusion
The result is a working analysis. Check it against source evidence and qualified judgment.
Nothing entered here is stored or sent. Review the prompt before sharing confidential, personal, patient, or privileged information.
Review the prompt
You can leave any field blank. The prompt will mark it as not provided.
If the record survives your review, send the question, evidence, unknowns, and requested next step.