Greater clarity regarding requests pertaining to deactivated or deleted accounts.
I deleted various accounts via their websites before the GDPR was enacted, but some of the relevant companies are known to retain data from these accounts and to continue to process it. YDR seems the best bet for requesting that remaining personal data is deleted, but maybe this should be something users can explicitly mention on the form? Also, greater clarity over requests about data obtained without having signed up to a given service (infamous FB shadow profiles being one example).
Comments: 1
-
06 Dec, '19
AdminCommenting in case OP checks, as the email left is a through-away. I don't think anything needs to be explicitly mentioned in the request, an organization has to comply (if the request meets the criteria - for more info see our FAQ) and delete all the data it has about you. If you wish you can edit the email before sending and add what you've mentioned, but I don't think it's needed.