Expert Advice Community

Guest

GDPR - RTBF

  Quote
Guest
Guest user Created:   Nov 02, 2020 Last commented:   Nov 04, 2020

GDPR - RTBF

Hi All,
I'm new to GDPR and reading blogs and articles from advisera.com which is really helpful. However, I have a query with respect to the Right to be forgotten.

I would like to know if a customer/individual can request a call center to delete or remove his chat logs which he had with a support agent? If so, does the call center has to take this request as an RTBF??

0 0

Assign topic to the user

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

EU GDPR DOCUMENTATION TOOLKIT

Step-by-step implementation for smaller companies.

Expert
Alessandra Nisticò Nov 04, 2020

"Hi All, I'm new to GDPR and reading blogs and articles from advisera.com which is really helpful. However, I have a query with respect to the Right to be forgotten.

I would like to know if a customer/individual can request a call center to delete or remove his chat logs which he had with a support agent?

It depends on the content of the chat.

Article 17, par. 1, (a) GDPR states that the data subject can demand the erasure of personal data processed by the controller if “the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed”.Article 17 par. 3 GDPR states also that the controller can reject the request, when the reason of saving data is:(b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;[…] (e) for the establishment, exercise or defence of legal claims.

If so, does the call center has to take this request as an RTBF??"

The call center will consider the request as a RTBF (Right To Be Forgotten) only if the processing is no longer necessary. Consider that you will need to be able to demonstrate why you rejected the request, because of the accountability principle. You should adopt a process that helps you to guide your staff in dealing with data subjects requests.

Here you can find more information:

If you want to know more about GDPR compliance you can consider enrolling in this EU GDPR Foundations Course: https://advisera.com/training/eu-gdpr-foundations-course//

Quote
0 0

Comment as guest or Sign in

HTML tags are not allowed

Nov 02, 2020

Nov 04, 2020

Suggested Topics

Guest user Created:   Apr 06, 2020 EU GDPR
Replies: 1
0 0

SAR REQUEST UNDER GDPR

Guest user Created:   Aug 06, 2023 EU GDPR
Replies: 1
0 0

Do we need VPN to comply with GDPR?

Guest user Created:   Jul 12, 2023 EU GDPR
Replies: 1
0 0

Business Continuity Plan and GDPR