Rule set sha256:adf208a05da8

GDPR_RIGHT_TO_ERASURE_001

One rule of the rule set with digest adf208a05da8edfde9ef5c5a1359104382ac794a5b4ec0d0aaca2fd21e90574c. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RuleGDPR_RIGHT_TO_ERASURE_001
Rule version2a1af5bea0e6a57990372d17c38f2fa1d853ceba8644a72d42c514bcdf807e2c
ProvisionRegulation (EU) 2016/679, Article 17(1)
ELI: http://data.europa.eu/eli/reg/2016/679/art_17/par_1/oj
ApprovalApproved
Approved by Leo Celis on 2026-10-16

rules/regulations/eu/gdpr_right_to_erasure.yaml

Citation
Regulation (EU) 2016/679, Article 17(1): The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing; (c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing; (d) the personal data have been unlawfully processed.
Condition
Requires controllers to erase personal data without undue delay when requested by the data subject, where the data is no longer necessary, consent is withdrawn, the subject objects, or data was unlawfully processed. The right to be forgotten under GDPR Article 17.
Condition type
regex, semantic
Status in the file
approved