What are GDPR processes you have implemented (anonymization, data deletion)?

GDPR processes are a set of procedures and technical solutions aimed at complying with the General Data Protection Regulation (GDPR). In my experience implementing such processes, key stages included:

• Data anonymization — removing or replacing personal identifiers (such as names, emails, IP addresses) so that data cannot be linked to a specific individual. This can involve hashing with a salt or generating pseudonyms.

• Data deletion — implementing a "right to be forgotten" mechanism, where a user's personal data is completely removed from all systems and backups upon request.

Example of anonymization in Go:

import (
    "crypto/sha256"
    "fmt"
)

func anonymizeEmail(email string) string {
    hash := sha256.Sum256([]byte(email))
    return fmt.Sprintf("anon-%x", hash[:8]) // first 8 bytes of the hash
}

An important aspect is documenting all actions and ensuring auditability to confirm GDPR compliance.