What they're not telling you: Telus says I'm
# THE TAKE: Telus' "Deleted" Data Isn't Actually Gone
Here's what Telus won't tell you plainly: deletion requests don't mean deletion. Your data sits in backup archives, disaster-recovery vaults, and third-party processors operating under different legal jurisdictions. It's not negligence—it's standard corporate infrastructure.
The breach notification proves it. Telus maintained your personal information months after you requested removal, likely because compliance costs less than genuine data destruction. They're not legally required to *immediately* purge everything; "reasonable timeframes" remain conveniently undefined.
This isn't a Telus-specific failure. Every telecom does this. AWS backups, customer service records, billing databases—all operating independently from deletion requests. The company hedges bets that you won't sue, and statistically, you won't.
The real scandal? We've normalized data persistence as unavoidable infrastructure instead of demanding immediate, verifiable destruction. Corporate convenience masquerading as technical necessity. They received confirmation that the deletion request had been processed. Months later, the same individual received official notification from Telus that their personal data had been compromised in a security incident. The timing creates a logical impossibility that corporate communications typically gloss over: if the account was deleted, why did Telus still possess the data to lose? This discrepancy exposes a gap between corporate deletion promises and actual data handling practices. Companies frequently assure customers that deletion means permanent removal, yet the Telus case suggests data may remain in company systems long after customers believe they've been erased. Whether this reflects negligent record-keeping, retention of "deleted" data in backup systems, or failure to properly execute deletion requests across all internal databases remains unclear from the customer's account. What is clear is that Telus possessed enough of the person's information to send them a breach notification—information they claimed to have removed. The mainstream media coverage of data breaches typically focuses on breach size and remediation steps offered to victims, rarely examining the upstream question: why did companies still have access to data customers explicitly asked them to destroy? This framing accepts corporate deletion claims at face value rather than scrutinizing whether deletion actually occurs. The Telus situation suggests a systematic gap between customer expectations and corporate practice that affects millions of people who've requested their information be removed. The incident also highlights the weakness of Canada's data protection enforcement. While
Disclosure: NewsAnarchist aggregates from public records, API feeds (Federal Register, CourtListener, MuckRock, Hacker News), and independent media. AI-assisted synthesis. Always verify primary sources linked above.
What the Documents Show
Follow the Money
What Else We Know
Primary Sources
Telus says I’m affected by a data breach… but I deleted my account in 2024?
Hi everyone, I recently received an email from Telus stating that my data have been involved in a data breach. The strange part is that I had already requested the
AI-Assisted
May 3, 2026
3 min read
Corporate Watchdog — The stories mainstream media won't cover.
🔎 Mainstream angle: The corporate press either ignored this story entirely or buried it in a 3-sentence brief. The framing, when it appeared at all, focused on process rather than impact.
What are they not saying? Who benefits from this story staying buried? Follow the regulatory filings, the court dockets, and the FOIA releases. The truth is in the paperwork — it always is.