undefined | Better HN

0 pointsmclarke8y ago0 comments

GDPR has an exemption related to the legal requirement to process data that might cover this (and related) scenarios.

> ...(unless) processing is necessary for compliance with a legal obligation to which the controller is subject;

0 comments

2 comments · 1 top-level

erpellan8y ago· 1 in thread

Does this mean that someone can game 1-time special offers by repeatedly signing up and then demanding to be forgotten?

There's probably no legal obligation to enforce once-only cashback sign-up offers, so the right to be forgotten would presumably have to be followed.

There is an exception category for “legitimate business interest” so we’ll probably have to wait and see what the courts have to say.

j / k navigate · click thread line to collapse