Data and the Use of the Internet

The Right to Be Forgotten

The right to be forgotten (also called the right to erasure) means that individuals can request an organisation to delete their personal data — permanently removing it from their systems and, where possible, from search engine results.

For example, if someone posted something on a forum years ago and no longer wants it associated with their name, they can formally request its removal.

Organisations must comply unless they have a legitimate legal reason to keep the data — such as for a criminal investigation or a contractual obligation.

This right ties directly into the UK GDPR data protection principles: data should not be kept longer than necessary, and individuals have rights over their own data.

Here's how an organisation should respond when a deletion request arrives: