Forget me yes, part two.

Austrian Data Protection Authority holds that a data controller can meet its obligations to satisfy a data subject’s erasure request under GDPR by anonymizing personal data.

Some points:

  • Erasure is not the same as destruction; the controller can select means to carry out the erasure.
  • The controller must ensure that