OneTrust Certified Privacy Professional Practice Exam

What does the right to erasure under GDPR allow individuals to do?

1. Transfer their data to new service providers

2. Request deletion of their personal data

3. Access their data history

4. Update their personal information

The correct answer is: Request deletion of their personal data

The right to erasure, commonly referred to as the "right to be forgotten," allows individuals to request the deletion of their personal data under the General Data Protection Regulation (GDPR). This right is aimed at giving individuals more control over their personal information, enabling them to have their data erased when it is no longer necessary for the purposes for which it was collected. For example, if a person has previously provided their data for a service they no longer use or if they withdrew consent for data processing, they can invoke this right to have their data removed. The right to erasure reflects the GDPR's commitment to data protection and individuals' privacy, allowing them to minimize the amount of personal information that is retained by organizations. The other options listed do not pertain to the right to erasure: transferring data to new service providers relates to data portability, accessing data history involves the right of access, and updating personal information pertains to the right to rectification. Each of these rights serves different purposes within the scope of data subject rights under GDPR.