Google

What happened

The Norwegian DPA instructed Google to delete a search result about a data subject's criminal past, but agreed with their decision to refuse erasure for two other search results. The DPA agreed these were still relevant after 10 years, in part because the data subject was a CSO in a company planning to go public, and the information was deemed to be of public interest. The Privacy Appeals Board later upheld the DPA's decision.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(d)Read →
• Art. 6Lawfulness of processing6(1)(f)Read →
• Art. 10Processing of personal data relating to criminal convictions and offencesRead →
• Art. 17Right to erasure (‘right to be forgotten’)17(1)(c)Read →
• Art. 21Right to object21(1)Read →

• Data principles
• Data subject rights
• Special categories
• Unlawful processing