← Back to glossary
What is GDPR right to erasure?
The GDPR right to erasure allows individuals to request deletion of personal data when it is no longer necessary or lawful to retain.
Definition
Also known as the right to be forgotten, this GDPR provision requires organisations to delete personal data when consent is withdrawn, processing is unlawful, or the original purpose has ended. Certain legal obligations can override the request.
Why it matters
Regulated firms must show they can remove data when required. A clear retention and deletion process protects both clients and the business.
How Docustody helps
Docustody enforces deletion timelines automatically and provides proof of deletion through audit exports.