Right to erasure: three conditions and three counterweights

The right to erasure, often called the right to be forgotten, is not a blanket delete button. It applies only when specific conditions are met: the data is no longer needed for its original purpose, the individual withdraws consent, or the data was unlawfully processed. The key contrast is between a straightforward request and one that clashes with a legal duty, public interest, or freedom of expression. If the scenario involves a journalist, a tax authority, or a public health record, the right almost certainly fails.

To avoid traps, always check three things first: is there a legal obligation to keep the data (e.g., accounting records must be held for years)? Does the processing serve public health or archiving? Is the data being used for freedom of expression? If any of these apply, erasure is blocked. A quick elimination trick: if the scenario mentions a court order, a regulator, or a research archive, the right to erasure will not succeed. Also remember that the right is about personal data—if the data is anonymised, Article 17 does not apply at all.

Test yourself with this: a citizen asks a hospital to delete their medical history because they no longer consent. Does the right to erasure apply? No—public health and legal obligations override it. That single contrast—consent versus legal duty—is the most common exam pivot. If you can recall that one counterweight, you will avoid the biggest mistake on this card.