Skip to main content
v2026.11,772 entries · CC-BY 4.0
Dictionary termTrack DStablev2026.2

Right to erasure

The right under Article 17 of the GDPR for a data subject to obtain from the controller the erasure of personal data concerning them without undue delay where one of the grounds in Article 17(1) applies and no exception in Article 17(3) operates.

ByCASRAI Editorial Board
· Last updated 23 Aug 2026
Share this

Ask CASRAI · included with Regulatory Radar

Ask about Right to erasure

Ask CASRAI answers research-administration questions and cites the passages behind every claim — and says so when the corpus does not cover something, instead of guessing. It comes with a Regulatory Radar subscription at $29 a month, alongside the daily digest of regulatory changes and the dashboard of what changed.

150 questions a day, on this site, over the API, or inside your own tools through the CASRAI MCP server.

Everything CASRAI publishes — this page, the dictionary, the guides and the news — stays free to read, with no account and no card.

Examples

Worked examples

  • Is an instance

    A participant in a marketing analytics study withdraws consent and requests erasure of their personal data; the controller, lacking another lawful basis, deletes the records and confirms in writing.

  • Is an instance

    A long-term population-health cohort receives an erasure request and applies the Article 17(3)(d) research exemption to retain pseudonymised records but removes direct identifiers from the participant-facing dataset and notifies the participant of the basis.

Counter-examples

Looks similar, but isn't

  • Not an instance

    Erasure does not apply to data the controller is legally required to retain (for example, regulated clinical-trial source documents under ICH GCP).

  • Not an instance

    Anonymous data, having no data subject, cannot be the subject of an Article 17 request.

Editorial commentary

Often called the right to be forgotten, Article 17 applies where the data are no longer necessary for the purposes for which they were collected, consent is withdrawn and no other lawful basis applies, the data subject objects under Article 21 and there are no overriding legitimate grounds, the data were unlawfully processed, or erasure is required to comply with a legal obligation. Article 17(3) provides that the right does not apply to the extent that processing is necessary for scientific or historical research purposes in accordance with Article 89(1) where erasure would be likely to render impossible or seriously impair the achievement of the research objectives. Controllers must document any reliance on Article 17(3) and communicate erasure to other controllers where the data have been made public.

Article 17(1) lists six grounds on which erasure can be sought: the data are no longer necessary for their original purpose (a); consent is withdrawn and no other lawful basis applies (b); the data subject objects under Article 21(1) with no overriding legitimate grounds, or objects under Article 21(2) to direct marketing (c); the data were unlawfully processed (d); erasure is required by EU or member-state law (e); or the data were collected in relation to information-society services offered to a child (f). Where a controller in a research context relies on the Article 17(3)(d) exemption, it should still weigh whether irreversibly anonymising the identifying elements — rather than retaining the data fully identifiable and unchanged — would better satisfy the underlying data-minimisation principle while still preserving the dataset’s research value; see the guide on data anonymisation in research for the applicable techniques.

References

  • GDPR Regulation (EU) 2016/679 Article 17 Right to erasure
  • European Data Protection Board Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search engines cases
  • UK Information Commissioner's Office Guide to the UK GDPR: Right to erasure

Also known as

right to be forgotten · GDPR Article 17

Machine-readable encodings

Use in your systems

JATS XML <role> element
xml
<role vocab="credit"
      vocab-identifier="https://casrai.org/dictionary/"
      vocab-term="Right to erasure"
      vocab-term-identifier="https://casrai.org/dictionary/term/right-to-erasure" />
Schema.org DefinedTerm (JSON-LD)
json
{
  "@context": "https://schema.org",
  "@type": "DefinedTerm",
  "@id": "https://casrai.org/dictionary/term/right-to-erasure",
  "name": "Right to erasure",
  "identifier": "https://casrai.org/dictionary/term/right-to-erasure",
  "description": "The right under Article 17 of the GDPR for a data subject to obtain from the controller the erasure of personal data concerning them without undue delay where one of the grounds in Article 17(1) applies and no exception in Article 17(3) operates.",
  "inDefinedTermSet": "https://casrai.org/dictionary/domain/compliance-regulatory#set",
  "url": "https://casrai.org/dictionary/term/right-to-erasure",
  "sameAs": [
    "right to be forgotten",
    "GDPR Article 17"
  ],
  "license": "https://creativecommons.org/licenses/by/4.0/",
  "publisher": {
    "@id": "https://casrai.org/#organization"
  },
  "author": {
    "@id": "https://casrai.org/#editorial-team"
  },
  "datePublished": "2026-05-21T02:22:53",
  "dateModified": "2026-08-23T05:31:21",
  "inLanguage": "en-GB",
  "isAccessibleForFree": true
}

Referenced across the research world

University of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logoUniversity of Cambridge logoColumbia University logoCrossref logoUniversity of Edinburgh logoHarvard University logoUniversity of Oxford logoPrinceton University logoStanford School of Medicine logoUniversity College London logoORCID logo
  • University of Cambridge logo
  • Columbia University logo
  • Crossref logo
  • University of Edinburgh logo
  • Harvard University logo
  • University of Oxford logo
  • Princeton University logo
  • Stanford School of Medicine logo
  • University College London logo
  • ORCID logo

View CASRAI adoption →

Regulatory Radar

Stop finding out after the fact

$29/month, cancel anytime. Daily digest updates from our analysis, a dashboard holding the same items, and a cited assistant for everything they raise.

  • Federal Register, Federal Register+, Grants.gov, Regulations.gov, NSF News, UKRI, plus CASRAI’s own published content.
  • 72,264 indexed passages, and every answer cites the ones it drew on.