unified
UC-DATA-08 — Execute deletion and other rights requests within deadlines
Operate a verified rights-request process with designated intake channels, identity verification, and statutory response clocks that executes data-subject rights including erasure/deletion, portability, restriction, objection, and rights related to automated decision-making, and directs service providers to do the same. Do not discriminate or retaliate against individuals for exercising rights, and disclose the material terms of any financial-incentive program with opt-in consent. Track every request end-to-end as evidence.
Record JSON · Open in map · Data retrieval guide
Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.
Attributes
- domain
- Data Protection & Privacy
- type
- corrective
- category
- administrative
Details
- unified_id
- UC-DATA-08
- title
- Execute deletion and other rights requests within deadlines
- statement
- Operate a verified rights-request process with designated intake channels, identity verification, and statutory response clocks that executes data-subject rights including erasure/deletion, portability, restriction, objection, and rights related to automated decision-making, and directs service providers to do the same. Do not discriminate or retaliate against individuals for exercising rights, and disclose the material terms of any financial-incentive program with opt-in consent. Track every request end-to-end as evidence.
- domain
- Data Protection & Privacy
- control_type
- corrective
- control_category
- administrative
- members
- framework
- gdpr
- control_id
- GDPR-Art15-22
- coverage
- partial
- delta
- Art 22 standing automated-decision prohibition and Art 19 recipient notification exceed request handling
- relationship
- intersects_with
- framework
- ccpa
- control_id
- CCPA-1798.105
- coverage
- partial
- delta
- notifying third parties (beyond service providers) to delete sold/shared data omitted
- relationship
- intersects_with
- framework
- ccpa
- control_id
- CCPA-1798.130-135
- coverage
- partial
- delta
- homepage 'Do Not Sell/Share' links and opt-out preference-signal (GPC) handling omitted
- relationship
- intersects_with
- framework
- ccpa
- control_id
- CCPA-1798.125
- coverage
- full
- relationship
- superset_of
- guidance
Source
No record-specific source URL is provided.
Connections
- UC-DATA-08 — Execute deletion and other rights requests within deadlines maps_to CCPA-1798.105 — Right to delete personal information
- framework
- ccpa
- control_id
- CCPA-1798.105
- coverage
- partial
- delta
- notifying third parties (beyond service providers) to delete sold/shared data omitted
- relationship
- intersects_with
- source_version
- CCPA (2018) as amended by CPRA (2020)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-08 — Execute deletion and other rights requests within deadlines mitigates Privacy harms: distortion, stigmatization, unwarranted restriction
- strength
- related
- rationale
- No-discrimination/retaliation rules and automated-decision-making rights curb algorithmic gatekeeping and unwarranted restriction.
- UC-DATA-08 — Execute deletion and other rights requests within deadlines maps_to CCPA-1798.125 — Non-discrimination and financial-incentive requirements
- framework
- ccpa
- control_id
- CCPA-1798.125
- coverage
- full
- relationship
- superset_of
- delta
- Not provided
- source_version
- CCPA (2018) as amended by CPRA (2020)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-08 — Execute deletion and other rights requests within deadlines maps_to CCPA-1798.130-135 — Request-handling mechanics, verification, and opt-out link requirements
- framework
- ccpa
- control_id
- CCPA-1798.130-135
- coverage
- partial
- delta
- homepage 'Do Not Sell/Share' links and opt-out preference-signal (GPC) handling omitted
- relationship
- intersects_with
- source_version
- CCPA (2018) as amended by CPRA (2020)
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-08 — Execute deletion and other rights requests within deadlines maps_to GDPR-Art15-22 — Data subject rights (access, rectification, erasure, portability, objection, automated decisions)
- framework
- gdpr
- control_id
- GDPR-Art15-22
- coverage
- partial
- delta
- Art 22 standing automated-decision prohibition and Art 19 recipient notification exceed request handling
- relationship
- intersects_with
- source_version
- Regulation (EU) 2016/679
- provenance
- mapper
- coworkcanvas-compliance-graph
- reviewDate
- 2026-09-07
- direction
- canonical_to_source
- defaultConfidence
- medium
- defaultStatus
- active
- note
- Each member is a documented relationship claim from the canonical unified control to a source control or guidance proposition. relationship: equal|superset_of (full) / intersects_with|subset_of (partial) / informs (guidance). confidence 'medium' = single-mapper, documented, not yet externally corroborated. source_version is the member framework's edition from the standard version register.
- UC-DATA-08 — Execute deletion and other rights requests within deadlines mitigates Unlawful retention or premature deletion of records
- strength
- related
- rationale
- Executing erasure requests deletes specific subjects' data, reducing unlawful over-retention.
- DSAR Fulfillment (Access & Deletion Requests) operates UC-DATA-08 — Execute deletion and other rights requests within deadlines
- UC-DATA-08 — Execute deletion and other rights requests within deadlines mitigates Power imbalance and loss of self-determination over personal data
- strength
- primary
- rationale
- Operating deletion, restriction, and objection rights directly restores individuals' ability to delete and restrict processing of their data.
- UC-DATA-08 — Execute deletion and other rights requests within deadlines mitigates Privacy-program non-compliance (GDPR, CCPA, state laws)
- strength
- primary
- rationale
- A verified process executing erasure/portability/restriction/objection within statutory clocks is the core defense against failing to honor DSRs on time.