EUGDPRData Subject RightsEASYFree question
Which of the following is a valid ground for exercising the right to erasure?
- A.The data subject wants to sell their data to another company, per Article 17's right to erasure, which applies even when processing is necessary for compliance with a legal obligation
- B.The data subject simply wants their data deleted for any reason
- C.The personal data is no longer necessary for the purpose it was collected
- D.The controller has too much data, and the statute applies to servers only
Why C is correct
One of the grounds for erasure under Article 17(1)(a) is when personal data is no longer necessary in relation to the purposes for which it was collected or processed.
Know someone studying for GDPR? Send them this one.