Right to be Forgotten

[Jamier-Host]

So, GDPR is a big deal for businesses currently. Having not worked in gambling for a while I don’t know the specifics on how this will be applied by the bookies but maybe some others can chip in.

The main thing that stands out for me is the so-called “right to be forgotten” and how that applies to restricted accounts.

https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/right-to-erasure/

Will they genuinely need to delete all data if requested, or will some sort of “business risk” excuse be enough of a reason to keep a record?

[DungBeetle]

Interesting isn’t it.  The other side of the coin is if you self exclude can you get data on you removed if you get an itchy finger?

[Jamier-Host]

Won't let me edit, but this is the official document for that section:

https://gdpr-info.eu/art-17-gdpr/

Would imagine 3 (e) covers them to keep data for problem gambling closures:

"for the establishment, exercise or defence of legal claims."

[Marky147]

Can they forget that I'm banned from bonuses in the casinos

[Jamier-Host]

Can they forget that I'm banned from bonuses in the casinos

Well that's exactly the point, if you request all your personal data is removed there should be no way for them to remember that you're flagged as a bonus whore

[SuperJez]

It says individuals have a right to have data erased in a number of circumstances, these are

Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed.
When the individual withdraws consent.
When the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.
The personal data was unlawfully processed (ie otherwise in breach of the GDPR).
The personal data has to be erased in order to comply with a legal obligation.
The personal data is processed in relation to the offer of information society services to a child.

I would guess online gambling sites can easily claim they have to keep the data for the reason it was originally collected. 

It might be interesting to try and claim the data was unlawfully processed if its possible to claim iesnare is effectively sharing information on you without consent via sharing data about your device between bookmakers.  Isn't there an ongoing investigation into that at the minute?

[Jon MW]

Just been doing some work on Data Protection - by the looks of it the current Data Protection Act that Parliament are looking at now has specifically removed the GDPR provision for right to have data erased; so this may all be a moot point anyway.