4 ms·
Not quite, only if the basis for processing is consent.
by isbvhodnvemrwvn 6y ago
Not quite, only if the basis for processing is consent.
- d1sxeyes 6y agoAlso not quite. Chapter 3 Article 17 covers the right to be forgotten. 1(b) is 'withdrawal of consent', but note also 1(c), which refers to article 21, which allows subjects to object, and you should (as a controller) have 'compelling legitimate grounds' to continue processing (which is a higher standard than 'legitimate interests', which can be the basis for processing the data in the first place).