Certified Information Privacy Manager (CIPM) — Question 7

Under the General Data Protection Regulation (GDPR), when would a data subject have the right to require the erasure of his or her data without undue delay?

Answer options

• A. When the data subject is a public authority.
• B. When the erasure is in the public interest.
• C. When the processing is carried out by automated means.
• D. When the data is no longer necessary for its original purpose.

Correct answer: D

Explanation

The correct answer is D because GDPR allows for the erasure of data when it is no longer needed for the purpose for which it was collected. Options A and B do not meet the criteria for data erasure under GDPR, and option C relates specifically to the method of processing, not the necessity of the data.