The right to erasure
Want to watch this video? Sign up for the course
or enter your email below to watch one free video.
Unlock This Video Now for FREE
This video is normally available to paying customers.
You may unlock this video for FREE. Enter your email address for instant access AND to receive ongoing updates and special discounts related to this topic.
Understanding Right to Erasure
Overview
The right to erasure, also known as the "right to be forgotten," applies in specific circumstances.
Conditions for Erasure
- Personal Data No Longer Necessary: Data can be erased if it's no longer needed for the purpose it was collected or processed.
- Withdrawal of Consent: Erasure is applicable if consent, the lawful basis for processing, is withdrawn by the individual.
- Objection to Legitimate Interests: If an individual objects to processing based on legitimate interests, erasure may apply unless there's an overriding legitimate interest.
- Other Circumstances: Erasure applies in cases of direct marketing, processing of data for children, unlawful processing, or compliance with legal obligations.
Exceptions to Erasure
The right to erasure does not apply if data processing is necessary for:
- Freedom of expression and information
- Legal obligations or public tasks
- Archiving or scientific research
- Establishment, exercise, or defence of legal claims
For special category data, exceptions include processing for public health or preventive medicine.
Request Process
- Submission: Requests for erasure can be made verbally or in writing to any part of the organisation.
- Response Time: Organisations have 28 days to respond to requests.
Refusal of Request
Organisations can refuse to comply with a request if it's deemed manifestly unfounded or excessive. In such cases:
- A "reasonable fee" can be requested to process the request.
- Organisations must justify their decision if refusing to deal with the request.