nerdexam
Isaca

CDPSE · Question #40

Which of the following describes a user's "right to be forgotten"?

The correct answer is B. The data is no longer required for the purpose originally collected.. The 'right to be forgotten' (also called the right to erasure, codified in GDPR Article 17) entitles individuals to request deletion of their personal data when it is no longer necessary for the purpose for which it was originally collected. This is the core trigger for the right

Data Life Cycle

Question

Which of the following describes a user's "right to be forgotten"?

Options

  • AThe data is being used to comply with legal obligations or the public interest.
  • BThe data is no longer required for the purpose originally collected.
  • CThe individual objects despite legitimate grounds for processing.
  • DThe individual's legal residence status has recently changed.

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    89% (25)
  • C
    7% (2)

Explanation

The 'right to be forgotten' (also called the right to erasure, codified in GDPR Article 17) entitles individuals to request deletion of their personal data when it is no longer necessary for the purpose for which it was originally collected. This is the core trigger for the right. Option A describes a situation where erasure can actually be REFUSED (legal obligation or public interest). Option C describes the right to object, not the right to erasure. Option D describes a residency change, which is unrelated to this right. The defining condition for the right to be forgotten is the lapse of the original data collection purpose.

Topics

#Right to be forgotten#Data subject rights#Data erasure#Data retention

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice