The General Data Protection Regulation provides the right to be forgotten or the right to erasure. A right to be forgotten request can be submitted before any organization processing your data.
The good thing is that such a request is very simple. There is no strict format or mode of submitting the request. This is done to make the process easier for everyone.
In this article, we discuss everything you need to know about a right to be forgotten request.
Contents
How to Submit a Right to be forgotten request?
A right to be forgotten request can be submitting orally or through a written letter/email. You can submit it to a part of the organization or any employee of the organization.
The process of submitting a right to be forgotten request is extremely simple. We recommend that you follow our template for requesting removal. This will ensure that you provide all the necessary information for removal.
Template for Right To Be Forgotten Request
As discussed above, there is no one size fits all when it comes to submitting a right to be forgotten request. However, we do have some guidelines on what should be included in a valid request.
Details of the person submitting the request
This includes the name, contact details, email address, address of the person submitting the right to be forgotten request.
Are you the data subject?
The data subject is the person whose personal data is stored by the organization. As per the GDPR, the person submitting the request does not have to be the data subject.
You need to specify if the person submitting the request is the data subject. Along with this, you also need to provide proof of identity and proof of address of the person submitting the request.
Details of the data subject
If the person submitting the request is not the data subject, then you need to provide the details of the data subject. This includes name, contact information, address, and email address.
Along with this, you also need to provide proof of identity and the proof of address of the data subject.
Reason for requesting removal of information
Article 17 of the GDPR provides a list of reasons for submitting a right to be forgotten request. You need to select one of the reasons and explain it in the request.
Choose one of the following:
- Data is no longer necessary to meet the purpose it was collected for.
- The data subject has withdrawn her consent for the processing of data.
- The data was unlawfully collected.
- The data needs to be erased to comply with a law or a legal order.
- The data belongs to a child or belonged to a child at the time it was collected.
Details of information to be removed
In the right to be forgotten request, you need to provide exact details of the information that needs to be removed. This includes the URL of the webpage along with any relevant details.
You also need to explain how the information relates to you or the data subject.
Declaration
The last step of the request is to declare that the information mentioned in the form is true to the best of your knowledge. Please make sure that you do not lie in this form as it might result in prosecution.
FAQ
-
Are there exceptions to the right to be forgotten?
Yes, just as any other law, there are some exceptions to the application of the right to be forgotten. The organization is not required to remove data if
-
How long does Google right to be forgotten request take?
Google needs to respond within 30 days of submitting the request.
-
Is the right to be forgotten a fundamental right?
The right to be forgotten is treated differently in different countries. Generally speaking, the right to be forgotten falls under the right to privacy, which is a fundamental right.
-
Can I ask for my data to be deleted under GDPR?
Yes, you can ask for your personal data to be deleted by submitting a GDPR right to be forgotten request.
-
How do I request data deletion?
You need to submit a verbal or written request to the organization processing your data. There is no standard template for this. You simply need to ensure that all the relevant information is provided for the removal of data.
