The Latvian Data Protection Authority (the Data State Inspectorate of Latvia (DSI)) has issued a fine of €7000 to an online retailer for non-conformity with a data subjects “right to erasure” and not co-operating with the DSI.
The individuals’ right to erasure (or right to be forgotten) allows a data subject to request that any not needed personal data to be deleted. It’s not an absolute right because the data controller can refuse if the data can be lawfully processed.
In this case the data controller (the online retailer) failed to delete the data and continued to process it. When challenged by the DSI (for information and to action the erasure within a specified timeframe) they did not co-operate.
Providing cost-effective, simple to understand and practical GDPR and ePrivacy advice and guidance, via my one-stop-shop helpline. I ❤️ GDPR