What Does the Right to Be Forgotten Mean in Privacy Law?

Which of the following describes a user’s “right to be forgotten”?

  1. The data is being used to comply with legal obligations or the public interest.
  2. The data is no longer required for the purpose originally collected. Source Reference Answer
  3. The individual objects despite legitimate grounds for processing.
  4. The individual’s legal residence status has recently changed.

Community Votes

B
100%

100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

This question tests the core definition of the right to erasure, not its exceptions — the trap is confusing conditions that justify refusing erasure (like legal obligations) with the right itself.

The right to be forgotten (right to erasure) lets individuals request deletion of personal data when it is no longer needed for its original purpose. Community consensus strongly supports option B as the definition of this right under GDPR and similar privacy laws.

Choosing option A ('The data is being used to comply with legal obligations or the public interest') is a common mistake because it sounds like a valid privacy principle, but it is actually a legal exception that overrides the right to be forgotten, not a description of the right.

Community Discussion (3 comments)

4dfe785 👍 1 Selected: B
The "right to be forgotten," or right to erasure, is a key principle of privacy laws such as the GDPR (General Data Protection Regulation). It gives individuals the right to request the deletion of their personal data when it is no longer necessary for the purpose for which it was collected, among other conditions.
Craigp990i 👍 1 Selected: B
B. The data is no longer required for the purpose originally collected.
shiowbah 👍 3
B. The data is no longer required for the purpose originally collected.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Option B correctly states that the right to be forgotten applies when personal data is no longer necessary for the purpose for which it was originally collected. This mirrors the GDPR Article 17 condition for erasure. Comment [2] accurately explains that the right to erasure gives individuals the right to request deletion when the data is no longer needed, and the vote distribution shows unanimous agreement on B.

Why the Other Options Are Wrong

Option A is wrong because it describes a lawful basis for retaining data (e.g., legal obligation or public interest), which is actually an exception to the right to erasure, not the right itself. Option C is wrong because the right to be forgotten applies when the individual objects and there are no overriding legitimate grounds — stating "despite legitimate grounds" inverts the condition. Option D is irrelevant; legal residence status does not affect the data subject's right to erasure.

Community Comment Notes

The top comment (3 likes) simply states B without explanation, reinforcing that the community sees this as straightforward. Comment [2] provides a clear definition referencing GDPR and the purpose limitation principle. No comment suggests any alternative answer, confirming the consensus is B.

Official Reference

Exam Strategy

On CDPSE and privacy exams, when a question asks what a data subject right 'describes,' focus on the definition itself rather than exceptions or denial grounds. Remember the key phrase 'no longer necessary for the purpose originally collected' as the hallmark of the right to erasure.

Related Analysis

Practice All CDPSE Questions

Access 229 questions with complete answers and detailed explanations.

View Full CDPSE Practice Test →

← Back to CDPSE Study Guide