Which of the following describes a user’s “right to be forgotten”?

Which of the following describes a user’s “right to be forgotten”?
A . The data is being used to comply with legal obligations or the public interest.
B . The data is no longer required for the purpose originally collected.
C . The individual objects despite legitimate grounds for processing.
D . The individual’s legal residence status has recently changed.

View Answer

Answer: B

Explanation:

The right to be forgotten is a privacy right that allows individuals to request the deletion or removal of their personal data from a data controller’s records or systems under certain conditions. One of these conditions is when the data is no longer required for the purpose originally collected, meaning that the data has become obsolete, irrelevant or excessive for fulfilling the initial purpose for which it was obtained or processed by the data controller. The other options are not valid conditions for exercising the right to be forgotten. The data is being used to comply with legal obligations or public interest is an exception that may prevent the data controller from deleting or removing the data upon request, as there may be overriding legitimate grounds for retaining the data for legal compliance or public interest reasons. The individual objects despite legitimate grounds for processing is a condition for exercising the right to object, not the right to be forgotten, which allows individuals to oppose the processing of their personal data based on their particular situation or for direct marketing purposes. The individual’s legal residence status has recently changed is not a relevant factor for exercising the right to be forgotten, as it does not affect the necessity or relevance of the data for its original purpose1, p. 107-108

Reference: 1: CDPSE Review Manual (Digital Version)