This clause explains the procedure for you to request that the other party delete your personal data and how they will handle that request—for example, "erasure requests must be submitted in writing; we will delete data within 30 days." Under GDPR Article 17, individuals have a legal "right to be forgotten" and can demand deletion in most circumstances; this clause sets out the practical steps. This matters because without a clear process, disputes arise over whether erasure actually happened, and companies can face fines for ignoring erasure requests. For example, if you ask a social media platform to delete your account and they keep your data "just in case," they are breaking the law.
Insist this clause includes a specific timeline (ideally 30 days or less) and requires written confirmation once erasure is complete. Ask whether erasure applies to all copies, including backups and archives—if the contract says "we'll delete it but keep backups indefinitely," that is not true erasure and you should push back. Also confirm that the process is free and does not require you to jump through unreasonable hoops (like paying a fee or proving your identity multiple times).
Frequently Asked Questions
What does this clause mean in simple terms?
This clause explains the procedure for you to request that the other party delete your personal data and how they will handle that request—for example, "erasure requests must be submitted in writing; we will delete data within 30 days." Under GDPR Article 17, individuals have a legal "right to be forgotten" and can demand deletion in most circumstances; this clause sets out the practical steps.
Why should I care about this clause?
This matters because without a clear process, disputes arise over whether erasure actually happened, and companies can face fines for ignoring erasure requests.
What are my options?
For example, if you ask a social media platform to delete your account and they keep your data "just in case," they are breaking the law.