Examkin

Question

Difficulty: MediumData Privacy and Compliance Regulations

A system administrator at an international company receives a formal request from an individual residing in the European Union asking to permanently remove their account records, personal details, and online activity logs from all enterprise databases. Which compliance regulation mandates this 'Right to Erasure' (Right to be Forgotten) for personal data?

  1. GDPR (General Data Protection Regulation)Answer
  2. B
    PCI-DSS (Payment Card Industry Data Security Standard)
  3. C
    HIPAA (Health Insurance Portability and Accountability Act)
  4. D
    FERPA (Family Educational Rights and Privacy Act)

Answer

The General Data Protection Regulation (GDPR) mandates the Right to Erasure (Right to be Forgotten) for personal data of individuals residing in the European Union.
The General Data Protection Regulation (GDPR) is an EU law that mandates strict data privacy controls for processing personal data of EU residents. One of its key provisions is the 'Right to Erasure' (also known as the Right to be Forgotten), which grants individuals the legal right to request the permanent deletion of their personally identifiable information under specific conditions.

Step-by-Step Solution

1
Identify the geographical scope and request type from the scenario.
The request involves an EU resident requesting the permanent deletion of their personal data.
Regulatory compliance mandates depend on the jurisdiction and type of data being processed.
2
Match the specific data subject right to the corresponding regulation.
The General Data Protection Regulation (GDPR) includes provisions for the 'Right to Erasure' (Right to be Forgotten).
GDPR sets stringent standards for consumer privacy, data control, and data deletion rights for EU citizens' Personally Identifiable Information (PII).

Key Concept

GDPR Scope and Data Subject Rights
Estimated Time:1m 0s
Rate this question

Topics

Data Privacy and Compliance Regulations

More questions from this topic