Handle a request for erasure or restriction

Information governance, information security and data protection officer: Handle a request for erasure or restriction. Starts when: A person asks for erasure or restriction. Steps: Verify; Test the grounds and exemptions; Act or refuse with reasons within one month. Done when: The person receives the decision within one month with reasons. Rules that apply: UK GDPR Articles 17 and 18.