What is Right to Erasure (Right to be Forgotten)?

The right to erasure (also called the right to be forgotten) under UK GDPR Article 17 allows individuals to request that an organisation deletes their personal data in certain circumstances — for example, when the data is no longer necessary for the original purpose, consent has been withdrawn, or the data was unlawfully processed. Organisations must respond within one month, either complying or explaining a valid reason for refusal. The right is not absolute: legitimate exceptions include where processing is necessary for legal claims, public interest tasks or compliance with a legal obligation. Refusing a valid erasure request can lead to an ICO investigation and fine.