GDPR

FlyAway Travel has offices in both the European Union and the United States and transfers personal information between those offices regularly. They have recently received a request from an EU customer requesting that their account be terminated. Under the GDPR, which requirement for processing personal information states that individuals may request that their data no longer be disseminated or processed?

The right to be forgotten, also known as the right to erasure, guarantees the data subject the ability to have their information removed from processing or use. It may be tied to consent given for data processing; if a subject revokes consent for processing, the data controller may need to take additional steps, including erasure.