Serverlogboek zonder bewaartermijn
Logbestanden met adressen en opgevraagde pagina's blijven staan omdat er nooit een termijn is ingesteld.
- Familie
- Bewaring
- Status
- actief
- Geldt voor
- backend
Wat er gebeurt
Servers, proxies and gateways write a line per request: the address, the time, the path requested, the browser string and often a session or account identifier. Rotation is configured for disk space rather than for a term, archives are copied to cheaper storage where no lifecycle rule applies, and the collection grows for as long as the system exists.
Waarom het ertoe doet
The result is a browsing history per address, held about people who were never asked and mostly never told. Years later it can still be searched, handed over or reached by whoever gets into the archive. The person cannot know the record exists, and the operator frequently cannot say how far back it goes.
Veelvoorkomende oorzaken
- log rotation configured for disk space instead of for a term
- archives copied to object storage where no lifecycle rule was set
- a retention schedule that covers the application database and is silent about infrastructure logs
- logs held by a hosting party under a contract that names no term
Dit is het níet
Logs that record what a person typed or read are Logs recording content, not events: that entry is about what stands in the line, this one about how long the line stays. Data that survives a deletion request only in a copy is Erasure that does not reach the backup, where a term does exist and one copy escaped it.
Hoe je het vaststelt
Indicator
The retention schedule of the same date names no term for request logs, or names one that the stored data contradicts: the oldest line available in the log store or its archive predates that term. Both sources belong to the operator and the finding is the difference between them.
Methode
document-comparison
Kwaliteit van de detectie
95 van 100
De grenzen van deze bevinding
Wat dit patroon zou weerleggen
- A term is set and enforced, and the oldest available line falls inside it.met de hand te toetsende bevinding vervaltThe enforcement is the point. A term in a document with older lines in the store is a plan, not a term.
- The lines carry no address, no identifier and nothing that can be traced to a person afterwards.met de hand te toetsende bevinding wordt zwakkerTruncating the address is common. Establish how much is removed, since a shortened address in a small network still points at a household.
- The retention follows from a statutory duty that names a term.niet uit de meting af te leidende bevinding krijgt een ander patroonThen the term is the statutory one, and the question becomes whether everything kept falls within that duty.
- The store queried is a copy kept for an incident, held separately and scheduled for deletion.met de hand te toetsende bevinding krijgt een ander patroon
Wat dit patroon níet vaststelt
- harm; the catalogue standardises a finding so it can be referred to, it does not weigh it
- severity; there is no score here, by design. Weighing belongs to whoever applies the entry to a concrete case
- unlawfulness; that is for a supervisory authority or a court
- intent; a fault is usually a build decision, not a plan
- absence: not finding it in one capture is not evidence that it is not there
Reproduceren
- manual
METHOD.mdno dedicated reproduction exists yet; follow the general method and the indicator above
Juridisch kader
Bepalingen
Veelgehoorde tegenwerpingen
Logs are technical data, not personal data.
An address with a time and a path points at a person as reliably as a cookie does, and the operator holds the means to link it to an account. What a file is called does not decide what is in it.
We keep them for security.
Security is a purpose that supports a term rather than the absence of one. Name the term the purpose requires and say what is deleted when it expires.
Our hosting party keeps those, not us.
The instruction is yours. Ask what term the contract names, and if it names none, that is the finding rather than an answer to it.
Geldt wanneer
to-processing