CISSP · Question #993
Which of the following would qualify as an exception to the "right to be forgotten" of the General Data Protection Regulation's (GDPR)?
The correct answer is A. For the establishment, exercise, or defense of legal claims. The right to be forgotten is a principle of the GDPR that grants data subjects the right to request the erasure of their personal data from a data controller under certain conditions. However, there are some exceptions to this right, where the data controller can refuse to erase
Question
Which of the following would qualify as an exception to the "right to be forgotten" of the General Data Protection Regulation's (GDPR)?
Options
- AFor the establishment, exercise, or defense of legal claims
- BThe personal data has been lawfully processed and collected
- CThe personal data remains necessary to the purpose for which it was collected
- DFor the reasons of private interest
How the community answered
(19 responses)- A89% (17)
- C5% (1)
- D5% (1)
Explanation
The right to be forgotten is a principle of the GDPR that grants data subjects the right to request the erasure of their personal data from a data controller under certain conditions. However, there are some exceptions to this right, where the data controller can refuse to erase the personal data if it is necessary for a legitimate purpose. One of the exceptions is for the establishment, exercise, or defense of legal claims, where the personal data is required for the data controller to assert, pursue, or protect its legal rights or obligations.
Topics
Community Discussion
No community discussion yet for this question.