CompTIA Data+ (DA0-002)Data Governance, Quality and ControlsMedium
A customer located in the European Union submits a formal request asking a company to permanently delete all of their personal data from company systems, stating the data is no longer necessary for the purpose it was originally collected. Under GDPR, this request corresponds to which data subject right?
- ARight to restrict processing
- BRight to erasure
- CRight to rectification
- DRight to data portability
Show answer & explanationAnswer & explanation
Correct answer: B. Right to erasure
The right to erasure, often called the 'right to be forgotten,' allows individuals under GDPR to request permanent deletion of their personal data when it is no longer necessary for the original purpose or other conditions are met.
Why the other options are wrong
- A. Restricting processing limits how data is used but does not delete it.
- C. Rectification allows correcting inaccurate data, not deleting it.
- D. Data portability allows transferring data to another provider, not deletion.
Right to Erasure (GDPR)
A GDPR data subject right, also called the 'right to be forgotten,' allowing individuals to request deletion of their personal data when it is no longer needed or other legal conditions apply.
- One of eight GDPR data subject rights
- Not absolute — exceptions include legal obligations
- Requires organizations to delete data from all relevant systems
Memory trick: 'Erase' = the 'forget me' button under GDPR.