Which of the following actions must an organization take to comply with a person's request for the right to be forgotten?

The correct answer is C. Remove all of the person's data.. The right to be forgotten, as outlined in regulations such as the General Data Protection Regulation (GDPR), requires organizations to permanently delete an individual's personal data upon request, unless there is a legal or contractual obligation to retain it.

Submitted by javi_es· Mar 6, 2026Security program management and oversight

Question

Options

APurge all personally identifiable attributes.
BEncrypt all of the data.
CRemove all of the person's data.
DObfuscate all of the person's data.

How the community answered

(36 responses)

A
3% (1)
B
6% (2)
C
92% (33)

Explanation

The right to be forgotten, as outlined in regulations such as the General Data Protection Regulation (GDPR), requires organizations to permanently delete an individual's personal data upon request, unless there is a legal or contractual obligation to retain it.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice