This bill would provide that a consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer. Upon such a request, the business would be required to delete the information from its records and direct any service providers to do the same. This right to delete would need to be disclosed by businesses collecting personal information
How does this work when someone requests that a company delete all invoices related to them?
There's a whole list of exceptions included in both GDPR and this law. For example, a business does not need to delete information when it is required to: "Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’s ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer"
Comments
How does this work when someone requests that a company delete all invoices related to them?
There's a whole list of exceptions included in both GDPR and this law. For example, a business does not need to delete information when it is required to: "Complete the transaction for which the personal information was collected, provide a good or service requested by the consumer, or reasonably anticipated within the context of a business’s ongoing business relationship with the consumer, or otherwise perform a contract between the business and the consumer"