Question to the Department for Digital, Culture, Media & Sport:

To ask the Secretary of State for Digital, Culture, Media and Sport, what (a) rights and (b) protections are available to people to prevent data on them that is held by organisations being destroyed under the provisions of the the General Data Protection Regulation implementation process.

The General Data Protection Regulation (GDPR) will come into force on 25 May 2018. It places obligations on organisations to process people's data lawfully, fairly and transparently. This includes making it clear to people how their data will be used, for how long it will be held and when it will be erased. The GDPR also provides individuals with increased control over their own data by conferring certain rights, such as the right to seek restriction of processing. This would allow an individual to oppose the erasure of personal data where he or she believed the processing activities of the organisation were unlawful.