3 ms·

I don’t see how US law is relevant for a UK bank.

• hnbad 5y ago
  GDPR gives a 30 days window for erasure requests. I can't seem to find any time frames in the UK's law about e-mail marketing or in those for other EU countries for that matter.
  • pieno 5y ago
    That’s the right to full erasure. Revoking consent for processing your data for marketing purposes should be possible at any time and as easy as giving consent: “The data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject shall be informed thereof. It shall be as easy to withdraw as to give consent.” (Article 7(3) GDPR) That does not mean that you cannot take a few days to process the revocation, but it does mean that you should handle it as soon as possible and the burden is on you as data processor to ensure you still have valid (non-revoked) consent before sending another mail.
• nkozyra 5y ago
  I wasn't applying it to a UK bank.