The European Data Protection Board (EDPB) has published an update of its thematic collection of decisions relating to the exercise of the rights to object and to erasure.

This publication, based on the public register of decisions taken by the lead supervisory authorities under Article 60 of the GDPR, synthesizes cases handled through the one-stop-shop mechanism. The updated document details how authorities assess the internal procedures of controllers regarding the management of these rights. It also outlines the most frequent violations as well as the corrective measures imposed. The cases addressed notably include objections to processing for direct marketing purposes and requests for deletion of user accounts or online profiles.