Are you prepared for the new data protection regulations?
InsightsA new EU data protection framework has been adopted. The “General Data Protection Regulation” or “GDPR” will...
The GDPR (which will apply in all EU member states from 25 May 2018) enhances existing data subject (individuals) rights and also includes a new data subject right of erasure of personal information. This is also known as the right to be forgotten.
The broad principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing. If such a request is made by an individual then the business must comply without undue delay, at no cost to the requesting individual, and by erasing all the individual’s personal data wherever it exists (including any archives and backups).
Individuals have a right to have personal data erased and to prevent processing in the following circumstances:
The right to be forgotten is not an absolute right, meaning that a data controller/search engine operator can refuse to comply with the request where the personal data is necessary for the following reasons:-
Senate House, 62–70 Bath Road,
Slough, Berkshire, SL1 3SR