GDPR Right to Deletion: How to Force Any Company to Delete Your Data
March 1, 2026 ยท 7 min read
Under GDPR Article 17 (also known as the "Right to Be Forgotten"), you can demand that any company processing your personal data permanently deletes it. Here's exactly how to exercise this right โ with free templates.
What Is GDPR Article 17?
Article 17 of the General Data Protection Regulation (GDPR) gives EU/EEA residents the right to request deletion (erasure) of their personal data when:
- The data is no longer necessary for the purpose it was collected
- You withdraw your consent and there's no other legal ground for processing
- You object to processing and there are no overriding legitimate grounds
- The data was unlawfully processed
- The data must be erased for legal compliance
Step-by-Step: How to Send a Deletion Request
- Find the company's DPO or privacy email. Usually listed in their Privacy Policy under "Data Protection Officer" or "Contact Us."
- Send a formal deletion request. Cite GDPR Article 17 specifically. Our templates include the exact legal language.
- Set a 30-day deadline. Companies must respond within 30 days under GDPR.
- If they ignore you: File a complaint with your national Data Protection Authority (DPA). Fines for non-compliance can reach โฌ20 million or 4% of global revenue.
Does GDPR Apply Outside Europe?
Yes. GDPR applies to any company worldwide that processes data of EU/EEA residents. If you signed up for Netflix US with an EU email, Netflix must comply with your deletion request. Companies like Google, Meta, Amazon, and Microsoft all have GDPR compliance processes.
When Companies Can Refuse
Companies may refuse deletion if they have:
- Legal obligations to retain data (tax records, financial regulations)
- Active legal claims involving your data
- Archiving purposes in the public interest
However, they must explain the legal basis for refusal in writing within 30 days.
๐ Key Phrase to Include
"Pursuant to Article 17 of the General Data Protection Regulation (GDPR), I hereby request the immediate erasure of all personal data you hold relating to me. Please confirm completion within 30 days as required by Article 12(3)."
Services with GDPR Templates
Our templates for many popular services include GDPR-specific language. Here are some popular ones:
- Tinder โ full data deletion + account removal
- BetterHelp โ therapy data + health records deletion
- Spotify โ listening history + personal data erasure
- Netflix โ viewing history + profile data deletion