How does the right to be forgotten work?

Individuals can typically exercise their right to have personal data erased under privacy laws through a process known as the “right to be forgotten” or “right to erasure.” This right allows individuals to request the deletion or removal of personal data when there is no compelling reason for its continued processing. They can usually make such a request directly to the organization or entity that holds their data, citing the relevant privacy law (such as the GDPR in the European Union) to support their claim. Organizations are generally obliged to respond to these requests within a specified timeframe and comply with the individual’s request unless there are legitimate grounds for retaining the data.