Primary document · European Data Protection Board
Guidelines 4/2019 on Article 25: Data Protection by Design and by Default
What it says
Privacy has to be built into a product from the start and set as the default. On erasure, the guidelines ask that inaccurate data be erased or corrected without delay; they say nothing specific about backups.
A summary of a public document, not legal advice.
