Janet Elder is a long-time customer at Logie Bank. Logie Bank operates several branches in California and has more than 5 million customers. Janet has several accounts at the bank apart from a checking account.
Janet has taken up a new job in Ann Arbor, Michigan and needs to move there. She wants Logie Bank to delete all the data and information it has about her. She exercises her new "right to be forgotten" under the CCPA. She puts a request through an online form at the Logie Bank website.
Logie Bank acknowledges Janet's request by responding to her through an email. The company informs her that she will receive a confirmation within 45 days.
Logie Bank uses its state-of-the-art data discovery solution to find and track Janet's personally identifiable information (PII) in file servers, failover clusters, and OneDrive environments; the solution also provides details about the location of the files and folders containing Janet's PII, the size of the files, and the dates the files were created or modified.
Data discovery allows Logie Bank to locate Janet's PII in several places including file servers and cloud services. Logie Bank can discover data by searching for specific keywords, regular expressions, or combinations of the two. The bank scans sensitive content from more than 50 file types including email, text, compressed files, and more. 
Janet's PII stored at the bank includes her Social Security number, driver license number, passport number, and much more. 
Logie Bank responds to Janet with the required information along with the confirmation of deletion of all data by the 45th day. In addition, Janet is provided the following information on her PII:
  • A list of the different categories and types of PII 
  • All the sources from which Janet's personal information is collected
  • Purposes for collection
  • Third parties with which Janet's data is shared        
  • Logie Bank's personal information collection practices