Florida Digital Bill of Rights (FDBR) 501.705(2)(c): 501.705(2)(c) and 501.706(6): right to delete, including data obtained from other sources

A controller must delete any or all personal data provided by or obtained about the consumer on an authenticated request. For data obtained from a source other than the consumer, it complies either by deleting the data while keeping a record of the request and the minimum data needed to keep it deleted (used for nothing else), or by opting the consumer out of all non-exempt processing of that data.