Set by the law · GDPR Art. 17(1)
Right to erasure ('right to be forgotten')
In plain English
People can have their personal data erased without undue delay in listed cases, for example when the data are no longer needed or consent is withdrawn. Exceptions include freedom of expression and legal obligations.
The official text
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay … where one of the following grounds applies: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) the data subject withdraws consent
Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: (a) for exercising the right of freedom of expression and information; (b) for compliance with a legal obligation
298 decisions on Fino cite Article 17 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.