Right of erasure
You have the right to ask us to erase your personal data without undue delay. This is also known as the 'right to be forgotten'.
UK GDPR Article 17 DPA 2018 (Section 47) sets out this right.
We'll erase your personal data if:
- we no longer need the personal data for the purpose for which we collected or processed them
- you withdraw your consent and there's no other legal ground for the processing
- you object to the processing and there are no overriding legitimate grounds for the processing
In certain circumstances, the right to erasure does not apply. If this is the case, we'll tell you why. For example:
- to exercise the right of freedom of expression and information
- to comply with a legal obligation
- for the performance of a task carried out in the public interest or in the exercise of official authority
- for archiving purposes in the public interest, scientific or historical research or statistical purposes where erasure is likely to make processing impossible or very difficult
- for the establishment, exercise or defence of legal claims
- for public health, preventative or occupational medicine purposes
- to avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties
- to protect public or national security
What happens next
If you don't give us enough information, this may delay our response to your request.
We have one month to action your request or tell you why we're not taking any action. In complex cases, we have three months. For law enforcement processing, we'll respond without undue delay and in any case within one month.
Your rights
You have the right to appeal to the Information Commissioner's Office (ICO). You can also lodge a complaint. If you think we've broken data protection laws, you can take us to court.
How to apply
- Verbally
- By post
- Online