Article
Forget Me: Handling Data Deletion Requests As A Data ...
spamtacular.com
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
Verification: Authenticate the request to ensure it’s legitimate. You’ll likely rely on the controller for verification procedures. Specific verification requirements may be set out in your contract (such as who is authorized to transmit the request). “Providers with robust privacy programs will have much of this information in data inventories and flow maps.” Deletion: Permanently erase the identified data. Ensure no residual copies remain.
Understanding Your Role “As a data processor, you may only act on instructions from the data controller.” When the user requests deletion from the controller, the controller will contact you to fulfill your part of that request. You are responsible for deleting the data you hold within a specified timeframe (usually a month under the GDPR or 45 days under statutes like the CCPA and TDSPA).
Understanding Your Role “That is usually going to be your customer.” When the user requests deletion from the controller, the controller will contact you to fulfill your part of that request. You are responsible for deleting the data you hold within a specified timeframe (usually a month under the GDPR or 45 days under statutes like the CCPA and TDSPA).
Understanding Your Role “Unless your contract specifies otherwise, data subjects requesting that a data processor delete data should be redirected to the data controller.” When the user requests deletion from the controller, the controller will contact you to fulfill your part of that request. You are responsible for deleting the data you hold within a specified timeframe (usually a month under the GDPR or 45 days under statutes like the CCPA and TDSPA).
“This means they can request that companies delete their personal data.” Understanding Your Role
Fulfilling deletion requests isn’t always straightforward. Here are some things to keep in mind: “Your procedures should account for requirements surrounding comprehensive deletion.” Legal Obligations: Certain data might need to be retained for legal reasons, such as sales records that must be retained for audit by taxing authorities. Consult with the controller for guidance.