The General Data Protection Regulation (GDPR) is a European Union data protection law that guarantees which right?

• A. Right to data portability
• B. Right to privacy
• C. Right to erasure
• D. Right to data minimization

Answer: (C)

The question tests understanding of explicit data subject rights under GDPR. Among the listed options, the right to erasure is a clearly defined, guaranteed right. Under GDPR, individuals can request that their personal data be deleted when certain conditions apply—for example, when the data is no longer needed for the purpose it was collected, when the person withdraws consent and there is no other legal basis for processing, or when the processing is unlawful. This is the right often called the “right to be forgotten,” and data controllers must comply unless there’s a compelling reason to retain the data.

Data portability is also a GDPR right, but it’s a different specific right (moving data from one controller to another). The right to privacy is a broad objective rather than a single, enumerated GDPR right, and data minimization is a principle about collecting only what’s necessary, not a standalone right. Therefore, the best-fit, explicitly guaranteed right among the options is the right to erasure.