The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) [the data subject has given consent to the processing of his or her personal data for one or more specific purposes], or point (a) of Article 9(2) [the data subject has given explicit consent to the processing of those personal data for one or more specified purposes], and where there is no other legal ground for the processing;
• the data subject objects to the processing p...Log in to see the rest ...

This obligation shall not apply to the extent that processing is necessary:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task ca...Log in to see the rest ...

National Commission for Information Technology and Civil Liberties

Data controller(s)