The right to be forgotten

Data subjects can request that information be erased in circumstances such as the data no longer being needed or . consent being withdrawn. The Data Controller may have grounds for continued processing: examples being the need for retention for the defence of a legal action. or legal/regulatory requirement for records to be kept for a certain period of time.