CIPM Data Subject Rights Flashcards

What is the right to erasure also commonly known as under GDPR?

Answer: Right to be forgotten

The right to erasure is commonly called the 'right to be forgotten,' allowing individuals to request deletion of their personal data under GDPR Article 17.

Under GDPR, within how many days must a data controller respond to a data subject access request (DSAR)?

Answer: 30 days

GDPR requires data controllers to respond to DSARs within one month (approximately 30 days) of receiving the request.

Which right allows individuals to move their personal data from one service provider to another?

Answer: Right to data portability

The right to data portability allows individuals to receive their personal data in a machine-readable format and transfer it to another controller.

What must an organization verify before fulfilling a data subject rights request?

Answer: The identity of the requestor

Organizations must verify the identity of the person making a data subject rights request before fulfilling it to prevent unauthorized disclosure.

Which right allows a data subject to request that processing be limited while the accuracy of their data is contested?

Answer: Right to restriction of processing

The right to restriction of processing allows data subjects to limit how their data is processed, such as when they contest its accuracy or object to processing.

Under CCPA, what term is used for the consumer right equivalent to GDPR's right to erasure?

Answer: Right to delete

The CCPA uses the term 'right to delete' for consumers to request deletion of their personal information collected by businesses.