# Data Privacy and Protection

Published articles for Data Privacy and Protection.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## How a Microsoft-signed SQL Server stored procedure lets sysadmins bypass disabled xp\_cmdshell

DevFeed: [How a Microsoft-signed SQL Server stored procedure lets sysadmins bypass disabled xp\_cmdshell](<https://devfeed.tech/articles/how-a-microsoft-signed-sql-server-stored-procedure-lets-sysadmins-bypass-disabled-xp-cmdshell-50486.md>)

Original publisher: [Read original article](<https://www.red-gate.com/simple-talk/databases/sql-server/how-a-microsoft-signed-sql-server-stored-procedure-lets-sysadmins-bypass-disabled-xp_cmdshell/>)

Author: Fabiano Amorim

Published: 2026-09-14T12:00:00Z

Content type: article

Language: en

Sources: [Simple Talk](<https://devfeed.tech/sources/simple-talk.md>)

Topics: [sql-server](<https://devfeed.tech/topics/sql-server.md>), [Security](<https://devfeed.tech/topics/security.md>), [Vulnerabilities](<https://devfeed.tech/topics/vulnerabilities.md>), [Exploit](<https://devfeed.tech/topics/exploit.md>), [configuration](<https://devfeed.tech/topics/configuration.md>), [Replication](<https://devfeed.tech/topics/replication.md>), [Databases](<https://devfeed.tech/topics/databases.md>)

Tags: [configuration](<https://devfeed.tech/tags/configuration.md>), [data-privacy-and-protection](<https://devfeed.tech/tags/data-privacy-and-protection.md>), [database](<https://devfeed.tech/tags/database.md>), [database-administration](<https://devfeed.tech/tags/database-administration.md>), [databases](<https://devfeed.tech/tags/databases.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [featured](<https://devfeed.tech/tags/featured.md>), [replication](<https://devfeed.tech/tags/replication.md>), [security](<https://devfeed.tech/tags/security.md>), [security-and-compliance](<https://devfeed.tech/tags/security-and-compliance.md>), [security-privacy-compliance](<https://devfeed.tech/tags/security-privacy-compliance.md>), [sql](<https://devfeed.tech/tags/sql.md>), [sql-injection](<https://devfeed.tech/tags/sql-injection.md>), [sql-server](<https://devfeed.tech/tags/sql-server.md>), [stored-procedures](<https://devfeed.tech/tags/stored-procedures.md>), [vulnerabilities](<https://devfeed.tech/tags/vulnerabilities.md>)

### AI overview

This article examines a SQL injection vulnerability in a Microsoft-signed SQL Server system stored procedure used for replication. It explains how the flaw can provide an execution path to xp_cmdshell even when that feature is disabled, while noting that the demonstrated proof of concept requires a login already belonging to a highly privileged fixed server role.

### Source excerpt

Discover how a Microsoft-signed system procedure bypasses SQL Server's disabled xp_cmdshell setting - plus detection and mitigation steps for defenders.... The post How a Microsoft-signed SQL Server stored procedure lets sysadmins bypass disabled xp_cmdshell appeared first on Simple Talk.

## How to delete personal data for GDPR & CCPA compliance

DevFeed: [How to delete personal data for GDPR & CCPA compliance](<https://devfeed.tech/articles/how-to-delete-personal-data-for-gdpr-ccpa-compliance-50483.md>)

Original publisher: [Read original article](<https://www.red-gate.com/simple-talk/data-security-privacy-compliance/how-to-delete-personal-data-gdpr-ccpa-compliance/>)

Author: Dejan Lukić

Published: 2026-09-11T12:00:00Z

Content type: tutorial

Language: en

Sources: [Simple Talk](<https://devfeed.tech/sources/simple-talk.md>)

Topics: [data](<https://devfeed.tech/topics/data.md>), [backups](<https://devfeed.tech/topics/backups.md>), [Database](<https://devfeed.tech/topics/database.md>), [Databases](<https://devfeed.tech/topics/databases.md>), [Protection](<https://devfeed.tech/topics/protection.md>), [service](<https://devfeed.tech/topics/service.md>), [systems](<https://devfeed.tech/topics/systems.md>), [datasets](<https://devfeed.tech/topics/datasets.md>)

Tags: [backups](<https://devfeed.tech/tags/backups.md>), [ccpa](<https://devfeed.tech/tags/ccpa.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [data](<https://devfeed.tech/tags/data.md>), [data-privacy](<https://devfeed.tech/tags/data-privacy.md>), [data-privacy-and-protection](<https://devfeed.tech/tags/data-privacy-and-protection.md>), [data-protection](<https://devfeed.tech/tags/data-protection.md>), [database](<https://devfeed.tech/tags/database.md>), [databases](<https://devfeed.tech/tags/databases.md>), [datasets](<https://devfeed.tech/tags/datasets.md>), [delete](<https://devfeed.tech/tags/delete.md>), [featured](<https://devfeed.tech/tags/featured.md>), [gdpr](<https://devfeed.tech/tags/gdpr.md>), [personal](<https://devfeed.tech/tags/personal.md>), [privacy](<https://devfeed.tech/tags/privacy.md>), [processors](<https://devfeed.tech/tags/processors.md>), [regulation](<https://devfeed.tech/tags/regulation.md>), [security-and-compliance](<https://devfeed.tech/tags/security-and-compliance.md>), [security-privacy-compliance](<https://devfeed.tech/tags/security-privacy-compliance.md>), [soft-delete](<https://devfeed.tech/tags/soft-delete.md>), [systems](<https://devfeed.tech/tags/systems.md>), [third-party](<https://devfeed.tech/tags/third-party.md>)

### AI overview

A practical guide to fulfilling GDPR and CCPA personal-data deletion requests across databases, replicas, caches, backups, logs, search indexes, derived data, and third-party processors. It explains legal requirements, deletion limits, backup handling, and crypto-shredding.

### Source excerpt

Learn how to fully erase a customer's data for GDPR and CCPA requests -- across backups, replicas, caches, and third-party processors.... The post How to delete personal data for GDPR & CCPA compliance appeared first on Simple Talk.