What Is the Right to Be Forgotten?
What Is the Right to Be Forgotten?
The right to be forgotten is the privacy right to have your personal data erased or removed in certain circumstances — allowing you to request that organizations delete personal information they hold about you, or that search engines remove certain results about you. Established prominently under European privacy law (and reflected in other privacy laws), it recognizes that people should have some control over their digital footprint and not be permanently defined by old or irrelevant information. This guide explains what the right to be forgotten is, where it applies, its limits, and how to exercise it, in plain terms.
What the Right to Be Forgotten Means
The right addresses control over your personal data's persistence:
The right to erasure: At its core, this right (formally the "right to erasure" under GDPR) lets you request that organizations delete your personal data in certain circumstances.
Search engine de-listing: A prominent aspect involves requesting that search engines remove certain results about you from searches of your name, so outdated or irrelevant information is less easily found (though the original content may still exist).
The underlying idea: It reflects the principle that people should have some control over their digital footprint, and that old, irrelevant, or inappropriate information should not define them indefinitely.
Where the Right to Be Forgotten Applies
The right's availability depends on jurisdiction:
European law: The right to be forgotten is established under European privacy law (GDPR's right to erasure), giving people in the EU the right to request erasure in certain circumstances.
Other jurisdictions: Other privacy laws include erasure or deletion rights (for example, deletion rights under laws like the CCPA), though the scope and specifics vary by region.
Varying scope: The exact right, its conditions, and how it applies differ by jurisdiction, so what you can request depends on where you (and the law) are.
When the Right Applies — and Its Limits
The right to be forgotten is not absolute; it applies in certain circumstances and has limits:
When it may apply: Erasure may be requested when, for example, data is no longer necessary for its original purpose, you withdraw consent (where consent was the basis), or the data was unlawfully processed, among other circumstances.
Balancing with other interests: The right is balanced against other interests, such as freedom of expression and information, legal obligations, and public interest. It does not allow erasing everything.
Exceptions: There are exceptions where data may be retained — for example, to comply with legal obligations, for legitimate public-interest reasons, or where retention is necessary.
Not absolute: Because of this balancing, the right to be forgotten does not guarantee erasure in all cases; requests are evaluated against these considerations.
The persistence challenge: Even where results are de-listed, the original content may still exist; and information that has spread widely is hard to fully erase, illustrating the practical limits.
How to Exercise the Right to Be Forgotten
If the right applies to you, you can exercise it:
Request erasure from organizations: You can contact an organization holding your personal data and request erasure, citing your right where it applies. Organizations subject to the law must respond appropriately.
Search engine removal requests: Search engines offer processes to request removal of certain results about you (especially under European law). You can submit such requests, which are evaluated against the relevant criteria.
Provide necessary details: Requests typically require identifying the data or results and the basis for removal.
Understand the outcome may vary: Because of balancing and exceptions, requests may be granted or denied based on the circumstances.
Complement with proactive steps: Beyond legal requests, proactively managing your footprint helps — deleting old accounts, removing data from data brokers, limiting what you share, and using privacy practices like temporary email (Temp90) for less-trusted sites to reduce what is collected in the first place.
Frequently Asked Questions
What is the right to be forgotten in simple terms?
The right to be forgotten is the privacy right to have your personal data erased or removed in certain circumstances — letting you request that organizations delete personal information they hold about you, or that search engines remove certain results about you from searches of your name. Established prominently under European privacy law (as GDPR's "right to erasure") and reflected in other laws, it recognizes that people should have some control over their digital footprint and not be permanently defined by old or irrelevant information.
Can I have anything I want erased under this right?
No — the right to be forgotten is not absolute. It applies in certain circumstances (such as when data is no longer necessary for its original purpose, you withdraw consent, or data was unlawfully processed) and is balanced against other interests like freedom of expression and information, legal obligations, and public interest. There are exceptions where data may be retained. So requests are evaluated against these considerations and may be granted or denied. Additionally, even where search results are de-listed, the original content may still exist, illustrating practical limits.
How do I exercise the right to be forgotten?
Where the right applies to you, you can contact an organization holding your personal data and request erasure, citing your right — organizations subject to the law must respond appropriately. For search results, search engines offer processes to request removal of certain results about you (especially under European law), which are evaluated against relevant criteria. Provide the details needed to identify the data or results and the basis for removal, and understand the outcome may vary due to balancing and exceptions. Complement legal requests with proactive footprint management — deleting old accounts, removing data from brokers, and sharing less.
Conclusion
The right to be forgotten is the privacy right to have your personal data erased or removed in certain circumstances — letting you request that organizations delete personal information they hold about you, or that search engines remove certain results about you. Established prominently under European privacy law as the "right to erasure" and reflected in other privacy laws (like deletion rights under the CCPA), it recognizes that people should have some control over their digital footprint and not be permanently defined by old or irrelevant information. However, the right is not absolute: it applies in certain circumstances, is balanced against interests like freedom of expression, legal obligations, and public interest, and has exceptions, so requests are evaluated and may be granted or denied. Even where search results are de-listed, original content may persist, illustrating practical limits. Where it applies, you can exercise it by requesting erasure from organizations and submitting search engine removal requests, providing necessary details and understanding outcomes may vary. Complementing legal requests with proactive footprint management — deleting old accounts, removing data from brokers, sharing less, and using privacy practices like temporary email (Temp90) for less-trusted sites — helps reduce your digital footprint in the first place. By understanding the right to be forgotten, its scope, and its limits, you can use it where it applies while taking practical steps to manage the digital footprint that defines you online.