The right to erasure, also known as the right to be forgotten, gives individuals the right to have their personal data erased by a data controller. The right can be exercised by a data subject if any of these conditions apply:
The data is no longer necessary for its original purpose
The data subject withdraws consent for the information to be collected
Personal data is being unlawfully processed