GDPR Mastery Guide For Product Managers
When you collect data linked to a citizen of the EU, they are entitled to know what data is kept, for what purpose, and for how long. Users are entitled to access (“Right To Access”), export (“Right to Data Portability”), change, and permanently delete (“Right To Be Forgotten”) all their data from your systems. They should be able to access their data as easily as they entered it in the first place.
Source: GDPR Mastery Guide For Product Managers – Noteworthy — The Journal Blog