Right to erasure

Under GDPR, individuals have a right to erasure or ‘right to be forgotten’. This means that individuals have a right to have their personal data removed if they no longer wish for it to be processed.

Additionally individuals have a right to request the restriction or suppression of their personal data. These are not absolute rights however.

The IBTS applies the general principle in line with GDPR that personal data should be kept for no longer than is necessary for the purpose(s) for which it was collected. The IBTS has a number of legal obligations in terms of the data and records it retains which supersede the right to be forgotten however; please see ‘how long do we keep your data?’ for more information.