(65) Every individual should have the right to rectification of personal data concerning him or her and the right to "be forgotten" if the retention of such data violates this Regulation, Union law or the law of the Member State to which the controller is subject. In particular, the data subject should have the right to have his or her personal data erased and no longer processed if the data are no longer necessary for the purposes for which they were collected or otherwise processed, if the data subject has withdrawn consent or if he or she has objected to the processing of personal data concerning him or her, or if the processing of his or her personal data is otherwise not in compliance with this Regulation. This right is relevant in cases where the data subject gave consent as a child when he or she was not fully aware of the risks involved in the processing, and later wishes to delete such personal data, particularly from the Internet. The data subject should be able to exercise this right even though he or she is no longer a child. However, the continued retention of personal data should be considered lawful if it is necessary for the exercise of freedom of expression and information, for the fulfillment of a legal obligation, for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the controller, for reasons of public interest in the field of public health, for archival purposes in the public interest, for scientific or historical research or statistical purposes, or for the establishment, assertion or defense of claims.