Comprehensive privacy statutes grant deletion rights subject to exceptions for legal obligations, security purposes, internal uses consistent with expectations, and completing transactions.
Service providers must be directed to delete as well.
Alternative Names:
Deletion Right|Right to Erasure
Why it Matters?
Exception scope determines compliance burden, since retention required for legal obligations, fraud prevention, and pending litigation is permitted and covers a substantial share of typical holdings, which means blanket deletion is neither required nor advisable. Litigation hold obligations override deletion requests, and documenting that basis is necessary. Service provider flow-down obligations require contractual mechanisms and verification.
Frequently Confused with
Related terms
Frequently asked questions
Is blanket deletion required?
What overrides a deletion request?
