The right to erasure in SAP: how SAP ILM enables GDPR-compliant data destruction

Frequently asked questions

What is the right to erasure under GDPR?

The right to erasure (Article 17) allows individuals to request that organisations erase their personal data when it is no longer necessary for the purpose for which it was collected. However, this right is not absolute and can be overridden by legal retention obligations.

How does SAP ILM support GDPR-compliant data destruction?

SAP ILM enables organisations to define retention periods, implement blocking rules, and automate destruction processes. It ensures that personal data is retained only for as long as legally required and is destroyed systematically once retention periods expire.

Can organisations use anonymisation instead of data destruction?

Anonymisation may be acceptable if it is robust enough to prevent re-identification. However, the EDPB has found that many organisations use inefficient techniques. SAP ILM data destruction provides a more reliable and auditable approach to meeting erasure obligations.

What is a legal hold in the context of SAP ILM?

A legal hold pauses the destruction process for specific data sets that are subject to ongoing legal proceedings, audits, or regulatory inquiries. It ensures that organisations do not destroy data that may be required for compliance purposes.

How often should SAP ILM destruction processes run?

Destruction processes should run regularly, typically on a scheduled basis aligned with the organisation's retention management calendar. Automated execution ensures consistency and eliminates the risk of manual errors or missed destruction cycles.