The right to erasure (sometimes know as the “right to be forgotten”) enables an individual to request that a data controller deletes or removes his or her personal data in certain circumstances.
This might be because there is no good reason to continue using or holding the data, the individual has withdrawn his or her consent, the data needs to be deleted for legal reasons or for other legitimate reasons.
Businesses therefore need to know where and how individuals’ data is stored, have the tools to recover any data that has been shared, and be able to delete all the data from all their systems.
In practical terms, this means that if they haven't already, businesses need to audit all their data as soon as possible to ensure they are ready and able to erase data, without undue delay, now that the new rules are in force.
If you would like more information on the right to be forgotten, when it applies, and what the exemptions are, our team can help.
