Control, Confidentiality, and the Right to be Forgotten. (arXiv:2210.07876v1 [cs.CR])

Recent digital rights frameworks stipulate an ability (e.g., the ``right to
be forgotten'' embodied in the GDPR and CCPA) to request that a \textit{data
controller} -- roughly, any system that stores and manipulates personal
information -- \emph{delete} one's data. We ask how deletion should be
formalized in complex systems that interact with many parties and store
derivative information. There are two broad principles at work in existing
approaches to formalizing deletion: \emph{confidentiality} and \emph{control}.
We build a unified formalism for …

confidentiality control right to be forgotten