Educause Security Discussion mailing list archives

Re: Requests for record/data erasure


From: Laura Raderman <lraderman () CMU EDU>
Date: Mon, 1 Feb 2021 19:32:02 +0000

We simply respond with “what law are you asking us to erase your data under?” And we haven’t heard any followup 
response from any of them….

Laura Raderman
ISO Policy & Compliance Coordinator
Carnegie Mellon University
lraderman () cmu edu

On Feb 1, 2021, at 2:15 PM, Kimmitt, Jonathan <jonathan-kimmitt () UTULSA EDU> wrote:

Hi all,
 
  We are receiving an increasing amount of ‘data erasure requests’, and I am wondering how other .edu’s are handling….
 
One of the emails that we are specifically receiving is:
____________________________________________

Hello Utulsa (utulsa.edu),

My name is *&*&*&*&*&* and I hereby request to erase all personal data that you hold about me.

Please send me an email confirmation of the complete and permanent erasure of the personal data once you have 
completed the erasure process.

My personal details are:

·         Name: *&*&*&*&*&*&*
·         Email: *&*&*&*&*&*&*&

As evidence of my interaction with your company, I received an email on 2018 March 19 that indicates that you are 
holding personal data about me.
Companies: For additional context to complete this DSR, *&*&*&*&*&*&*&*&

Thanks,
*&*&*&*&*&*&*&
 
____________________________________________

 
Ignoring the validity of the email, I’m curious to if anyone has any specific policies that deal with requests for 
erasure from a data subject, who are not otherwise under GDPR scope…..
 
Thanks all!
 
 
 
-Jonathan
 
~
Jonathan Kimmitt
CISSP, FIP, CDPSE, CIPP/E, CIPM, 
CIPT, GLEG, GPEN, GSNA, PCIP, CEH
Chief Information Security Officer
Information Technology
The University of Tulsa
918.631.2743
 
**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community



**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

Current thread: