On 2018-05-22 13:21, Ben Cooksley wrote:
From what I've understood thus far, if you get a request for removal you basically have to remove it (and given the costs of defending your position and the penalties if the court finds against you, the standing action is probably going to be to do a removal regardless of what the GDPR actually says)
I would give an empathical no. Do (re)read art. 17 GDPR and you will notice that there are plenty of circumstances in which there is room to refuse to remove.
One of the cases there is an unqualified obligation to remove is if the processing is solely based on consent. In a lot of cases this is not the case. For example in a source code repository. Or a mailinglist archive.
Regards,
Walter