Article 17 and Recitals 65 & 66 relate to this right.

This is also known as the "right to be forgotten" and to a great extent reflects the currently existing right.

The right can be exercised when one of the following applies:

or the data:

Limitations on the extent of the exercise of the right include where the processing is necessary:

  Controllers obliged to erase data are subject to additional obligations:

   If the data has been made public by the controller, Article 17(2) states:

"the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the data, that the data subject has requested the erasure by such controllers of any links to, or copy or replication of that personal data."

  If the controller has disclosed the personal data, Article 17b applies and the controller must advise each recipient of the data in question about the erasure and, if requested, the controller must inform the data subject about those recipients.