A former customer living in the European Union contacts a company and demands that all personal information the company holds about them, including their name, address, and purchase history, be permanently deleted from all systems. Which privacy principle is the customer exercising?
The 'Right to Be Forgotten,' also known as the Right to Erasure under GDPR, is a privacy principle that allows individuals to request the deletion of their personal data from an organization's records under certain circumstances. The other options are incorrect. 'Data Subject Access' is the right to request a copy of one's data, not its deletion. 'Data Inventory and Retention' refers to an organization's internal processes for managing and storing data. 'Ownership Assertion' is not a standard term for a specific data subject right.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is meant by 'Right to Be Forgotten' in data privacy?
Open an interactive chat with Bash
Under what conditions can an organization refuse a 'Right to Be Forgotten' request?
Open an interactive chat with Bash
How does 'Right to Be Forgotten' differ from 'Data Subject Access'?