# R7 | x-ai/grok-4.3 | run 2

## Prompt

Explain the GDPR 'right to erasure' (right to be forgotten): what it is and its main limitations. Cite official sources.

## Response

The GDPR's right to erasure (Article 17), also called the right to be forgotten, lets individuals request deletion of their personal data without undue delay when specific conditions are met. It applies to data controllers and processors across the EU and aims to give people greater control over their information. The right is not absolute and includes multiple exceptions that organizations may invoke.

## What It Is
Under Article 17 of Regulation (EU) 2016/679 (GDPR), data subjects may obtain erasure when the data is no longer necessary for the original purpose, consent is withdrawn and no other legal basis exists, the individual objects to processing and no overriding legitimate interests apply, the data was unlawfully processed, erasure is required to comply with a legal obligation, or the data was collected in relation to information society services offered to a child. Controllers must act without undue delay and notify third parties of the request where feasible.

## Main Limitations
Erasure does not apply when processing is necessary for exercising the right of freedom of expression and information, complying with a legal obligation or performing a task in the public interest, reasons of public interest in public health, archiving purposes in the public interest, scientific or historical research, or statistical purposes, or establishing, exercising, or defending legal claims. Organizations must balance the request against these grounds and may refuse or partially fulfill it, informing the individual of the reasons and appeal options such as a supervisory authority or court.

For the full legal text, refer to the official GDPR regulation [GDPR Article 17](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679#d1e2980-1-1). Guidance from the European Commission is available at [European Commission GDPR page](https://commission.europa.eu/law/law-topic/data-protection_en).

What specific aspect of GDPR compliance or data requests are you looking to explore next?
