Privacy

Right to Erasure

The right to have your personal data deleted — also known as the "right to be forgotten."

The right to erasure (commonly called the "right to be forgotten") allows data subjects to request that a data controller delete their personal data.

When It Applies

  • The data is no longer necessary for the purpose it was collected
  • The data subject withdraws consent and there is no other legal basis
  • The data subject objects to processing and there are no overriding legitimate grounds
  • The data has been processed unlawfully
  • The data must be erased to comply with a legal obligation

Exceptions

The right to erasure does not apply when processing is necessary for:

  • Exercising the right of freedom of expression and information
  • Compliance with a legal obligation
  • Public health purposes
  • Archiving in the public interest, scientific research, or statistical purposes
  • Establishing, exercising, or defending legal claims

GDPR Article 17.

Related Terms

Data ControllerPrivacy

The entity that determines the purposes and means of processing personal data.

Data SubjectPrivacy

The identified or identifiable person whose personal data is being processed.

ConsentPrivacy

A freely given, specific, informed, and unambiguous indication of agreement to data processing.

Right of AccessPrivacy

The right to obtain a copy of your personal data and information about how it is processed.

GDPRLegal

The General Data Protection Regulation — the EU's comprehensive data protection law, effective since May 2018.

Right of Access