What Does the Right to Be Forgotten Mean in Privacy Law?
Short answer
B The data is no longer required for the purpose originally collected.
Question
Key Takeaways
This question tests the core definition of the right to erasure, not its exceptions — the trap is confusing conditions that justify refusing erasure (like legal obligations) with the right itself.
The right to be forgotten (right to erasure) lets individuals request deletion of personal data when it is no longer needed for its original purpose. Community consensus strongly supports option B as the definition of this right under GDPR and similar privacy laws.
Common mistake: Choosing option A ('The data is being used to comply with legal obligations or the public interest') is a common mistake because it sounds like a valid privacy principle, but it is actually a legal exception that overrides the right to be forgotten, not a description of the right.
Expert Analysis
Why the Answer Is Correct
Option B correctly states that the right to be forgotten applies when personal data is no longer necessary for the purpose for which it was originally collected. This mirrors the GDPR Article 17 condition for erasure. Comment [2] accurately explains that the right to erasure gives individuals the right to request deletion when the data is no longer needed, and the vote distribution shows unanimous agreement on B.
Why the Other Options Are Wrong
Option A is wrong because it describes a lawful basis for retaining data (e.g., legal obligation or public interest), which is actually an exception to the right to erasure, not the right itself. Option C is wrong because the right to be forgotten applies when the individual objects and there are no overriding legitimate grounds — stating "despite legitimate grounds" inverts the condition. Option D is irrelevant; legal residence status does not affect the data subject's right to erasure.
Community Comment Notes
The top comment (3 likes) simply states B without explanation, reinforcing that the community sees this as straightforward. Comment [2] provides a clear definition referencing GDPR and the purpose limitation principle. No comment suggests any alternative answer, confirming the consensus is B.
Official Reference
https://gdpr-info.eu/art-17-gdpr/
This link opens the official vendor documentation in a new tab.
Exam Strategy
On CDPSE and privacy exams, when a question asks what a data subject right 'describes,' focus on the definition itself rather than exceptions or denial grounds. Remember the key phrase 'no longer necessary for the purpose originally collected' as the hallmark of the right to erasure.
Community Votes
100% of anonymous learners picked answer B. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 2 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 2
-
4dfe785 👍 1 Answered BThe "right to be forgotten," or right to erasure, is a key principle of privacy laws such as the GDPR (General Data Protection Regulation). It gives individuals the right to request the deletion of their personal data when it is no longer necessary for the purpose for which it was collected, among other conditions.
-
Craigp990i 👍 1 Answered BB. The data is no longer required for the purpose originally collected.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All CDPSE Questions
Access 229 questions with complete answers and detailed explanations.
View Full CDPSE Practice Test →