TalkTalk has refused to delete a former customer's email address which was taken over by spammers – because the unfortunate person cancelled their contract eight years ago.
Internal house keeping processes should have taken care of this account long ago.
Nor had it explained why a customer account that had been inactive for eight years wasn't deleted after the customer walked away.
Would the GDPR right to be forgotten request include the mailbox?
Biting the hand that feeds IT
