What is the Right To Be Forgotten?

What is the Right To Be Forgotten?

The right to be forgotten gives data subjects under the GDPR the ability to have a controller of data erase personal data concerning the data subject without undue delay.

There are limits on the right to be forgotten. It is not absolute.  Data might have been already published and copied by others outside of the control of the controller. If the data has been shared with other controllers, the primary controller needs to inform the other controllers which are processing the data that the data subject has requested the erasure.

The controller also might have valid reasons for maintaining some data, such as where is necessary in exercising the right of freedom of expression, compliance with a legal obligation in the public interest or in the exercise in controller’s capacity as an official authority, for reasons of public interest in the area of public health, for archiving in the public interest, scientific or historical research purposes or statistical purposes, or in the establishment, exercise or defense of legal claims.

See GDPR, Article 17.   https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN

Leave a Reply

Your email address will not be published. Required fields are marked *