Does anyone know if there is any provision in the GDPR that allows or disallows private collection of data for internal research? I understand that GDPR has provisions like "the right to be forgotten" -- we do process removal requests so the data is not available publicly.
Conversation
Replying to
GDPR'S Legitimate Interest justification is the most flexible approach and most likely to suit you.
You still take on a lot of responsibility as a data controller. And once your legitimate interest ceases to exist, you're obliged to delete.
1
3
This Tweet was deleted by the Tweet author. Learn more
Do you know where in the GDPR this is covered?
1
Replying to
Yes, you would have to delete it. But the requesting user should delete it from Reddit too, otherwise you could simply ingest it again.
2