EDPB highlights "right to erasure" inadequacies: Exceptions, backups, and pseudonymisation

Rob presents a few highlights from the EDPB's latest Coordinated Enforcement Framework report on the "right to erasure".

- Poor storage limitation and retention schedule practices are leading to issues satisfying erasure requests.

- Too many people still conflating anonymisation and pseudonymisation, and thus incorrectly relying on the latter as an erasure method.

- Controllers are failing to delete personal data from backup systems in parallel with live systems.

- There has been overreliance on exemptions without having conducted an appropriate balancing assessment.

Time to start preparing for the next CEF topic: Transparency!