GDPR and recorded calls

I am not sure about the rights of the customers (callers) and I am not sure about my rights either.
1. Can a customer (caller) ask to delete the records with his/her voice?
2. Am I eligible to ask the same from my company (if for example I would like to delete all records with my voice from the archive of the company)?

Answers:

There is the same approach regardless if the request comes from an employee or a customer.

A data controller must comply with the request where:
- the individual has objected to the processing and (other than in relation to objections to direct marketing) there are no overriding legitimate grounds to justify that processing;
- the personal data is no longer needed for the purpose for which it was collected or processed;
- the individual withdraws consent and there are no other grounds for the processing;
- the per sonal data is unlawfully processed;
- there is a legal obligation under Union or Member State law to erase the personal data; or
- personal data was processed in connection with an online service offered to a child.

However the right to erasure is not an absolute right and the controller does not need to comply if the processing is:
- necessary for rights of freedom of expression or information;
- for compliance with a legal obligation under Union or Member State law;
- in the public interest or carried out by an official authority;
- for public interest in the area of public health;
- for archiving or research; or
- for legal claims.

If you want o find more about data subject rights check out our webinar “Data Subject Rights under the EU GDPR” https://advisera.com/eugdpracademy/webinar/data-subject-rights-under-the-eu-gdpr-free-webinar-on-demand/