GDPR - Data suppression Vs Data removal

hpuse

I recently came across a data company that provides physical mailing address data from email address (specifically BBC iPlayer email address, for TV licensing purposes). They have provided a link in their website for "data suppression", which I have never come across before. 

Here is the link hosted by them to "suppress" your own data : https://mydatachoices.co.uk/Suppress 

What exactly is data suppression? How does it link to GDPR right to be forgotten or erasure?

Would anyone know?

Thanks,

glennevis

If you tap the (i) info link on the data suppression form "Why do we need this information?", it's explained there.

hpuse

glennevis said:

If you tap the (i) info link on the data suppression form "Why do we need this information?", it's explained there.

That is their(i.e website/company's) narrative/story.

In reality there no provision for "data suppression" in the regulation itself - be it for data controller or processor, as far as am aware!

eskbanker

Suppression is also referred to as restriction of processing, i.e. the data remains but its use is limited:

https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-restrict-processing/

Ectophile

The right to be forgotten under the GDPR is actually quite weak.  If an organisation can produce a "legitimate interest" to keep your data, then they will.  That legitimate interest may last several years.  Given the Limitation Act, 6 years could be reasonable.

But you can ask an organisation to stop using your data, e.g. to stop mailing you with offers.

MyRealNameToo

Ectophile said:

The right to be forgotten under the GDPR is actually quite weak.  If an organisation can produce a "legitimate interest" to keep your data, then they will.  That legitimate interest may last several years.  Given the Limitation Act, 6 years could be reasonable.

But you can ask an organisation to stop using your data, e.g. to stop mailing you with offers.

7 years is often considered reasonable given the fact the claimant has 6 years to issue but you may not receive it instantly. 

The other issue with being forgotten is that your request to be forgotten is also forgotten so yes your data is purged but then if they gather your information again they can hold it again until you ask to be forgotten again. Suppression, or limiting processing, persists as they are still entitled to hold your data but it won't be used in their marketing services. 

born_again

Is this one of these companies that will go out to other companies to get them to remove your data from their systems?

A_Geordie

Ectophile said:

The right to be forgotten under the GDPR is actually quite weak.  If an organisation can produce a "legitimate interest" to keep your data, then they will.  That legitimate interest may last several years.  Given the Limitation Act, 6 years could be reasonable.

Not when the original purpose of the data was for marketing purposes. There's an absolute right under the GDPR to object to marketing and erasure. Legitimate interest is not a defence under the right to erasure. 

Also relying on the potential scenario that the data could be retained just in case the individual chooses to sue them in the future, is not a good enough reason alone to keep the data - this breaches the storage limitation principle which requires you to only retain data for as long as the data is necessary for the purposes you intended and that purpose still applies.

MyRealNameToo

born_again said:

Is this one of these companies that will go out to other companies to get them to remove your data from their systems?

No, they're the opposite really, they help companies integrate customer data including augmenting the data with their own to help find the more valuable customers, weed out bad payers, match product to customer, do propensity modelling  etc. 

Their nod to the consumer though is giving them the option to be excluded so in principle you won't be targeted by their clients as you won't be identified as someone who opens all junk mail or buys stuff whenever there's a discount etc.