'Right to be forgotten' requests: do I have to honour them?
Under GDPR, if a right to be forgotten request is received by a company, must it be honoured?
GDPR indicates that in some situations the request must be honoured, but not all. If consent was specifically given for the collection of data, normally this data should be deleted when no longer needed. This article discusses the various scenarios.