According to the General Data Protection Regulation (GDPR), when is an organization required to delete this data?

A user grants an IoT manufacturer consent to store personally identifiable information (PII).

According to the General Data Protection Regulation (GDPR), when is an organization required to delete this data?
A . Within ninety days after collection, unless required for a legal proceeding
B. Within thirty days of a user’s written request
C. Within seven days of being transferred to secure, long-term storage
D. Within sixty days after collection, unless encrypted

View Answer

Answer: B