Right to erasure ('right to be forgotten')
Art. 17
-
Last updated
Mandatory
Catalog reference
Erase a person's personal data without undue delay when one of the Art. 17 grounds applies — e.g. it's no longer necessary for its original purpose, consent is withdrawn, or the person objects and you have no overriding ground to continue. Some exemptions apply (e.g. legal obligations, freedom of expression).
Narrative — how we satisfy this requirement
An erasure request is handled as a ticket, backups age out on the retention schedule, and the requester is told when that has happened.
Review
On trackNext review is 10/28/2027 — no urgency right now.
- Review cadence
- Every 365 days
- Last reviewed
- Next review due