Governance & Compliance · Software component
Erasure Orchestrator
Software componentGovernance & ComplianceSafety, Security & Governancearc:ErasureOrchestrator
A governance component that executes a verified erasure request across every system holding the subject's data, applying retention exceptions, marking backups beyond use, notifying processors and recording evidence.
Responsibility. Carries out the right to erasure across the organization's data ecosystem.
Also known as: Right-to-be-forgotten executor, Deletion cascade
Relationships
reads dependency
writes dependency
is routed to by dynamic
sends data to dynamic
is constrained by control
Design guidance
- MUST locate data across primary databases, purchase logs, service records, analytics, warehouses, backups and third-party processors.
- MUST retain data still needed for legal compliance, legal claims, public-interest tasks or ongoing treatment, recording what was retained and why.
- MAY mark backup data beyond use and let normal rotation overwrite it instead of deleting individual backup records.
- SHOULD also delete derived data such as analytics and embeddings (Ref9.05).
- MUST document request, verification, systems searched, data deleted, third parties notified and completion.
Quantitative guidance
As stated by the sources; verify before use.
- Completed within approximately one month of the request (Ch9.7); within 30 days (Ref9.05).
Classification
- Patterns
- Beyond-use backup markingDeletion cascade to processors
- Quality attributes
- Transparency and accountability (NIST AI RMF: accountable and transparent)Functional suitability: correctness and validity (ISO/IEC 25010 | NIST AI RMF: valid)
- Risks mitigated
- Residual personal data in derived storesDeleting data under legal retention
- Frameworks & regulations
- GDPR Art. 17
Sources
- Ch9.7: T. Nguyen, "GDPR and Data Protection Regulations," in Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam, 1st ed. 2026, ch. 9.7. ISBN: 9798244538229.
- Ref9.05: "Privacy and Data Protection for AI Systems," unpublished reference note (references/Chapter 9 - Safety, Ethics, and Compliance/05-Privacy-Data-Protection.md), Mastering Agentic AI Systems: Guide for the NVIDIA NCP-AAI Exam supplementary materials, 2026. unpublished note