Article 17 GDPR
Right to delete data (Right to be forgotten)

1. The data subject has the right to request from the controller the immediate erasure of personal data concerning him/her, and the controller is obliged to erase the personal data without undue delay if one of the following circumstances applies:

(a) personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

(b) the data subject has withdrawn the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a), and there is no other legal basis for the processing;

(c) the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);

(d) personal data have been processed unlawfully;

(e) the personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the controller is subject;

(f) the personal data were collected in connection with the provision of information society services referred to in Article 8(1).

2. If a controller has made personal data public, and is required to delete such personal data under paragraph 1, the controller shall, taking into account available technology and the cost of implementation, take reasonable measures, including technical measures, to inform controllers processing such personal data that the data subject requests such controllers to delete any links to such data, copies of such personal data, or replications thereof.

3. Paragraphs 1 and 2 do not apply to the extent that processing is necessary:

(a) to exercise the right to freedom of expression and information;

(b) to comply with a legal obligation requiring processing under Union law or the law of the Member State to which the administrator is subject, or to perform a task in the public interest or in the exercise of the public authority entrusted to the administrator;

(c) on grounds of public interest in the field of public health, in accordance with Article 9(2)(h) and (i) and Article 9(3);

(d) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Article 89(1), insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the purposes of such processing; or

(e) to establish, investigate or defend claims.