What is the right to be forgotten?
The right to be forgotten, or right to erasure, lets an individual ask an organization to delete their personal data. It comes from GDPR Article 17, and the CCPA includes a similar right to delete. Some exceptions apply, such as data kept to meet a legal obligation.
What the buyer is really asking
This is the erasure right under GDPR Article 17 and its CCPA equivalent. Describe how deletion is triggered, which systems it reaches, and what happens to copies in backups. Buyers accept backups that age out on a schedule if you state the window.
Other ways buyers ask it
Every one of these wants the same answer:
- “Describe your process for handling right to be forgotten requests.”
- “How do you delete an individual's personal data on request?”
- “Is personal data removed from backups after a deletion request?”
- “How do you confirm that deletion is complete?”
Evidence to have ready
- The deletion procedure and the systems it covers
- Backup retention settings that show when deleted data ages out
- The deletion clause in your DPA
How Tyrvar answers this
Tyrvar treats every wording above as one question. You write the answer once, attach the evidence, and revisit it when your setup changes. Each buyer gets that approved answer no matter how their questionnaire words it. If you have not answered it yet, Tyrvar flags the question for you and does not make something up. Try it on your own questionnaire.