Right to be Forgotten
What is Right to be Forgotten?
The right of individuals to request the erasure of their personal data under certain circumstances. Established under GDPR Article 17, also known as the right to erasure, it applies when data is no longer necessary, consent is withdrawn, or processing is unlawful.
Terms that appear alongside right to be forgotten
Each of these is named in at least one of the same controls as right to be forgotten. The number is how many controls name both.
- consent 15 shared controls
- data subject 15 shared controls
- automated decision making 15 shared controls
- gdpr 15 shared controls
- right to object 14 shared controls
- data subject rights 14 shared controls
- data portability 13 shared controls
- profiling 10 shared controls
Frameworks that govern right to be forgotten
What the standards actually require on right to be forgotten
Requirements naming right to be forgotten across 6 standards, quoted from the control text.
Where a controller has published personal data it is obliged to erase under Article 15, it must take reasonable steps, technical ones included, having regard to available technology and cost, to inform other controllers processing the data that the data subjec...
albania-law-no-124-2024-on-personal-data-protection::16 · Article 16: the right to be forgotten for published data and search results →Erase personal data without undue delay where the data is no longer necessary for the purposes it was collected or processed for, where consent is withdrawn and no other legal ground applies, where the data subject objects under Article 21(1) and there are no...
GDPR-Art.17 · Right to erasure (right to be forgotten) →Personal data that may adversely affect the data subject may not be kept for more than five years from the date the recorded events occurred, unless a special rule sets another term or the parties agreed a shorter one;
paraguay-law-on-protection-of-personal-data-law-no-6534-2020::9 · Article 9 Right to be forgotten for credit data →The controller must erase personal data without undue delay where they are no longer needed, consent is withdrawn and no other basis exists, the data subject objects under Article 21(1) with no overriding grounds or objects to direct marketing, the processing...
uk-gdpr-uk-general-data-protection-regulation::Art.17 · Article 17 Right to erasure ('right to be forgotten') →Standard 4 per Section 22 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be accurate and + where necessary + kept up to date.
JM-DPA2020-Standard4-Accuracy-Sec22-Up-to-Date-Rectification-Erasure-Correction-Right · Jamaica DPA 2020 Standard 4 - Accuracy + Section 22 + Up-to-Date + Rectification Right + Erasure Right + Correction Procedures + Quality Assurance + Sources Verification →The organization approves a taxonomy of data lifecycle stages; specifies the metadata needed to automate lifecycle management and controls (by data domain, sensitivity, legal ownership and location);
edm-council-cdmc-cloud-data-management-capability-framework::5.1.1 · 5.1.1 A data lifecycle management framework is defined →Questions people ask about right to be forgotten
What is Right to be Forgotten?
Why is Right to be Forgotten important for compliance?
Which compliance frameworks address Right to be Forgotten?
Where can I learn more about Right to be Forgotten?
See how Right to be Forgotten applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.