Swimming Pools, Pee, and Trying to Delete Your Data From the Internet
Troy Hunt discusses the difficulty of permanently deleting personal data from the internet, using the analogy of trying to remove urine from a swimming pool—once data is out there, it's nearly impossible to completely erase. He explains the technical and practical challenges of data removal, including backups, archives, and third-party copies.
Background
- Troy Hunt is a prominent Australian security researcher and Microsoft Regional Director, best known for running Have I Been Pwned (HIBP), a free service that lets people check if their email or passwords have been exposed in data breaches.
- This post is about the near-impossibility of fully erasing your personal data from the internet once it's out there. Hunt uses the analogy of trying to remove pee from a swimming pool — you can't just scoop it out; it's already dispersed.
- The piece contrasts two common scenarios: (1) getting a single embarrassing photo removed (often doable via a direct DMCA takedown request), versus (2) erasing all traces of your identity from data broker sites, search caches, archives, and third-party copies (essentially impossible).
- Background context: Hunt frequently fields requests from people who want to "delete themselves from the internet" after a breach or doxxing incident. This post sets expectations about what's actually achievable.