Ask for your data to be deleted

Last checked: 12 Oct 2026

The right to erasure (sometimes called the right to be forgotten) lets you ask an organisation to delete your personal data. It isn't absolute: it applies in specific situations, and organisations can refuse for specific reasons.

When it applies

The regulator lists these situations:

• The organisation no longer needs your data for the reason it collected or used it.
• You consented to the use, and have now withdrawn your consent.
• You objected to the use of your data, and your interests outweigh the organisation's.
• You objected to the use of your data for direct marketing.
• The data was collected or used unlawfully.
• The organisation has a legal obligation to erase it.
• The data was collected from you as a child for an online service.

When they can refuse

• Freedom of expression and information, including journalism and academic, artistic or literary purposes.
• Keeping the data is needed to comply with a legal obligation, or for legal claims.
• A public task or official authority.
• Scientific or historical research, or archiving in the public interest, where erasure would prejudice it.
• Some public health and medical or care purposes.
• The request is "manifestly unfounded or excessive".

How to ask

1. Contact the organisation, verbally or in writing; writing gives you a record. You can ask any part of the organisation.
2. Say which data you want deleted and why, using one of the situations above. For marketing lists, object to direct marketing at the same time (see the right to object).
3. Use the regulator's template letter if it helps: it's on the right to erasure page.

How long they have

One calendar month, which can be extended by up to two more months if the organisation tells you within the first month. If it reasonably needs more information, such as proof of identity, the month starts when it receives that information.

Deletion and suppression. For marketing lists, an organisation may keep a minimal suppression record so your details aren't added back from another source. Deleting that too may make it more likely you reappear later. See the credit agencies' marketing services for how the main UK marketing-data companies handle this.

The regulator's erasure guidance currently carries a note that it's under review following the Data (Use and Access) Act 2025.

Sources

• Information Commission (ICO website): Your right to get your data deleted
• Data (Use and Access) Act 2025, s.76 (time limits)

This page describes your options and how organisations say they handle requests. It isn't legal advice. See About & sourcing to report a correction.