Skip to content

Release v15.38.4

Choose a tag to compare

View all tags
@github-actions github-actions released this 03 Jul 22:48
v15.38.4
3c09a40
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Enables GDPR right-to-erasure (crypto-shredding) from a Chronicle client application. Deleting a person's PII encryption key makes every PII value encrypted under that subject permanently unreadable — everywhere it appears. Previously the client IPIIManager only threw NotImplementedException, so there was no way to trigger erasure from application or ops code.

Added

  • Chronicle clients can delete a subject's PII encryption key to satisfy GDPR right-to-erasure (crypto-shredding), via IPIIManager.DeleteEncryptionKeyFor and IEventStore.PII. IPIIManager can also be injected directly.

Changed

  • Reading a PII value whose encryption key has been deleted now returns an empty value instead of throwing, so read models and queries for an erased subject keep working.

Removed

  • Removed the non-functional CreateAndRegisterKeyFor from IPIIManager; it only ever threw NotImplementedException, and encryption keys are already registered automatically on first use.
Assets 2
Loading