# R7 | z-ai/glm-5.2 | run 1

## Prompt

Explain the GDPR 'right to erasure' (right to be forgotten): what it is and its main limitations. Cite official sources.

## Response

The GDPR 'right to erasure', commonly known as the 'right to be forgotten', is established under Article 17 of the UK GDPR and EU GDPR. It allows individuals to request that an organisation delete their personal data, though this right is not absolute and only applies in specific circumstances [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/).

## What the Right to Erasure Is

Under Article 17, individuals have the right to obtain from the controller the erasure of their personal data "without undue delay" [EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?qid=1775261725114&uri=CELEX%3A02016R0679-20160504). The controller then has an obligation to erase the data if one of several grounds applies [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/).

## When the Right Applies

The right to erasure applies when [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/):

- The personal data is no longer necessary for the purpose for which it was originally collected or processed
- The individual withdraws consent that formed the lawful basis for processing, and there is no other legal ground
- The individual objects to processing based on legitimate interests, and there are no overriding legitimate grounds to continue
- The individual objects to processing for direct marketing purposes
- The personal data has been processed unlawfully
- Erasure is necessary to comply with a legal obligation
- The personal data was collected to offer information society services to a child

## Main Limitations

The right to erasure does not apply where processing is necessary for [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/):

- Exercising the right of freedom of expression and information
- Complying with a legal obligation
- Performing a task carried out in the public interest or in the exercise of official authority
- Archiving purposes in the public interest, scientific research, historical research, or statistical purposes where erasure would render impossible or seriously impair the achievement of that processing
- The establishment, exercise, or defence of legal claims

Additional exemptions exist for special category data, including where processing is necessary for public health purposes or for preventative/occupational medicine under professional secrecy obligations [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/).

## Compliance Requirements

Organisations must respond to erasure requests without undue delay and at the latest within one month of receipt [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/). Requests can be made verbally or in writing.

**Refusal grounds:** An organisation can refuse to comply if the request is manifestly unfounded or excessive, assessed on a case-by-case basis without a blanket policy [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/). A request may be manifestly unfounded if it repeats the substance of previous requests or overlaps with other requests [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/).

If refusing, the organisation must inform the individual of the reasons, their right to complain to the ICO or another supervisory authority, and their ability to seek a judicial remedy [ICO](https://cy.ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-erasure/).

---

Would you like more detail on how the right to erasure interacts with search engines specifically, or guidance on making an erasure request?
