Article 17 - Right to erasure ('right to be forgotten')

Article 17 of the GDPR grants individuals the right to have their personal data erased, often called the "right to be forgotten," when it is no longer necessary, consent is withdrawn, or processing is unlawful. Data controllers must act without undue delay, subject only to exceptions such as legal obligations, public interest tasks, or the establishment, exercise, or defence of legal claims.