This article appeared in Cybersecurity Law & Strategy, an ALM publication for privacy and security professionals, Chief Information Security Officers, Chief Information Officers, Chief Technology Officers, Corporate Counsel, Internet and Tech Practitioners, In-House Counsel. Visit the website to learn more.
On May 25, 2018, many United States companies will find themselves subject to the European Union’s sweeping General Data Protection Regulation (GDPR). The GDPR creates new rights that do not exist under — and may even conflict with — U.S. laws. One of those rights is the “right to erasure,” which entitles individuals to have their personal data “erased” from company records within one month in some circumstances.
