A resident submits a right-to-be-forgotten request through the city’s online services portal. What should the privacy process emphasize first?
Select an answer to reveal the explanation.
Short Explanation
Right to be forgotten isn’t a junk-drawer delete-all button or a shrug. Run the official rights playbook—erase what you should, keep what the law still requires, and write down why.
Full Explanation
Data-subject rights processes, including erasure or right-to-be-forgotten requests where applicable, require a controlled workflow: verify identity, locate personal data, apply erasure or refusal rules, honor statutory retention and legal holds, and document outcomes. Unreviewed mass deletion of backups or ignoring valid requests both create compliance risk. Clear procedures protect residents and the municipality.