Query Language Support for Timely Data Deletion
Query Language Support for Timely Data Deletion
复制标题
DOI：
10.48786/edbt.2022.35
复制
发表时间：
2022
期刊：
影响因子：
--
通讯作者：
Subhadeep Sarkar;Manos Athanassoulis
中科院分区：
文献类型：
--
作者：
Subhadeep Sarkar;Manos Athanassoulis
现代数据系统的一个关键驱动因素是在确保低延迟查询处理的同时需要快速摄取。这导致了写优化数据存储的诞生，它以不适当的方式实现摄取（插入、更新和删除）。在这样的不适当的数据存储中的存储是经由无效化在逻辑上执行的，同时将无效化的数据保留任意长的时间。与此同时，随着新的政策变化，例如引入被遗忘权（在欧盟的GDPR中），删除权（在加州的CCPA和CPRA中）以及删除权（在弗吉尼亚州的VCDPA中），及时和持久删除用户数据的重要性变得至关重要。在本文中，我们指出，国家的最先进的查询语言缺乏必要的支持，以表达用户的偏好，数据保留和删除。为此，我们首先确定两类删除：（i）基于保留的删除和（ii）按需删除，需要支持法规遵从性。接下来，我们提出了将这些用户删除需求转化为应用程序级规范的挑战。为此，我们提出了查询语言扩展，可以表达按需和及时持久删除用户数据。最后，我们讨论应用程序和系统级修改如何在隐私法规下协同工作，并作为设计符合删除要求的数据系统的垫脚石。
A key driver of modern data systems is the requirement for fast ingestion while ensuring low-latency query processing. This has led to the birth of write-optimized data stores that realize ingestion (inserts, updates, and deletes) in an out-of-place manner. Deletes in such out-of-place data stores are performed logically via invalidation while retaining the invalidated data for arbitrarily long. At the same time, with new policy changes, such as the introduction of the right to be forgotten (in EU’s GDPR), the right to delete (in California’s CCPA and CPRA), and the deletion right (in Virginia’s VCDPA), the importance of timely and persistent deletion of user data has become critical. In this paper, we point out that state-of-the-art query languages lack the necessary support to express a user’s preferences for data retention and deletion. Toward this, we first identify two classes of deletes: (i) retention-based deletion and (ii) on-demand deletion , that need to be supported for regulation compliance. Next, we present the challenges in transforming these user deletion requirements into application-level specifications. For this, we propose query language extensions that can express both on-demand and timely persistent deletion of user data. Finally, we discuss how the application and system level modifications work hand-in-hand under the privacy regulations and act as stepping stones toward designing deletion-compliant data systems .