The EDPB has published an update of the One-Stop-Shop (OSS) case digest on the right to object and the right to erasure. The project was developed under the Support Pool of Experts programme and is based on OSS decisions listed in the EDPB public register.
A thematic OSS case digest selects and presents the most important decisions on a given topic drawn from the EDPB public register. It complements the register by highlighting key rulings and providing aggregated results related to the theme.
The update focuses on how Data Protection Authorities analyse organisations' internal processes when assessing compliance with the right to object and the right to erasure. It collects insights from OSS decisions to show the authorities' approach to evaluating organisational practices.
While the digest does not replace individual decisions, it indicates that authorities pay attention to operational procedures. Companies should expect scrutiny of deletion mechanisms, tracking of objection requests, and documentation of decisions. This scrutiny typically affects cross-functional cooperation between legal, compliance and IT teams.
Based on the digest, organisations should review and update request-handling procedures, verify technical deletion and restriction mechanisms, and improve record-keeping that demonstrates fulfilment of data subject rights.
The updated OSS case digest provides a consolidated view of how authorities approach the right to object and the right to erasure. For businesses, the key takeaway is to verify and strengthen processes and IT tools that support fulfilment of these rights.
1. What is the purpose of the digest? The digest highlights and aggregates important OSS decisions on a specific topic to complement the public register.
2. Which rights are covered by this digest? The digest focuses on the right to object and the right to erasure.
3. Will the digest change legal obligations? The digest does not change law but informs how authorities assess compliance and common problems.
4. Which teams should act on the digest? Legal, compliance and IT teams should collaborate to align processes and technical measures.