The Schleswig-Holstein Higher Regional Court ruled an account holder at a private credit bureau has a right to deletion under Article 17 of the EU General Data Protection Regulation. The court decided the plaintiff can request deletion of data Schufa Holding copied from a bankruptcy announcement portal following a six-month retention period. The court also ruled against Schufa's claims on a legal basis of processing.
German court offers decision on GDPR's right to delete
Related stories
Notes from the IAPP Canada: CPS25 zeroes in on the issues that matter most
A view from DC: An updated NIST Privacy Framework
Handsets, headsets and hyperscreens: Emerging ideas for immersive experiences and the importance of governance by design
Notes from the Asia-Pacific region: India strides ahead on the digital front
New developments in global adequacy capabilities