Country-specific legal content
Drafted with legal expertise for each jurisdiction, far more thorough than AI-generated drafts that copy generic clauses across borders.
The right to erasure allows you to request that an organisation deletes your personal data. Use our free UK template to exercise your Article 17 rights under the UK GDPR and have your data permanently removed.
PDF (free) + editable Word (.docx) with Expert
Available as a print-ready PDF or an editable Microsoft Word (.docx) file.
The right to erasure, also known as the right to be forgotten, is a data subject right under Article 17 of the UK GDPR. It allows individuals to request that an organisation deletes their personal data in certain circumstances.
The right applies when the data is no longer necessary for the purpose it was collected, when you withdraw consent and there is no other legal basis for processing, when you object to processing and there are no overriding legitimate grounds, when the data has been unlawfully processed, or when deletion is required to comply with a legal obligation.
The UK right to erasure is not absolute. British organisations can refuse the request if the data is needed for exercising the right of freedom of expression, complying with a legal obligation, public health purposes, archiving in the public interest, or establishing, exercising or defending legal claims under English law.
Our right to erasure template helps you make a clear, legally grounded deletion request.
Full name, address and identity verification information to confirm you are the data subject.
Name, address and DPO contact details of the organisation holding your data.
Specific description of the personal data you want erased, or a request for all data to be deleted.
The specific Article 17 ground on which your request is based.
If applicable, formal withdrawal of any consent previously given for data processing.
Request that the organisation informs any third parties to whom the data was disclosed of the erasure.
Specific request for deletion of data published online, including cached and archived copies.
Reminder of the one-month statutory deadline for response under the UK GDPR.
Request for written confirmation once the data has been deleted.
Notice that failure to comply will result in a complaint to the Information Commissioner’s Office.
Follow these steps to request the deletion of your personal data.
Determine which organisation holds the data you want deleted and find their DPO or privacy team contact details.
Describe the personal data you want deleted. Be as specific as possible to help the organisation locate and process your request efficiently.
Identify which Article 17 ground applies to your request, such as withdrawal of consent, data no longer necessary, or unlawful processing.
Complete the template and send it to the organisation by email or post. Include identity verification documents.
The organisation has one month to respond. If they refuse or fail to respond, you can escalate to the ICO.
Four things that make our templates more thorough than AI-generated drafts and more current than static template libraries.
Drafted with legal expertise for each jurisdiction, far more thorough than AI-generated drafts that copy generic clauses across borders.
Templates carrying statute references are continuously updated as the law changes. Your document always reflects the current legal framework.
Free to download. Vector text, embedded fonts, statute citations baked in. Print, sign, file. Ready for any signing flow including electronic signature.
Continue editing in Word after download. Add custom clauses, reuse the template for similar agreements, or share with a colleague for collaborative review.
Requires Expert one-time unlock or any paid Doxuno subscription.
The right to erasure has specific conditions and exceptions that both parties should understand.
This template is for informational purposes only and does not constitute legal advice. Consult a qualified solicitor for advice specific to your situation.
Reviewed for England & Wales law
Article 17(1) of the UK GDPR lists six grounds: data no longer necessary, consent withdrawn, objection to processing with no overriding grounds, unlawful processing, legal obligation to erase, and data collected from a child in relation to information society services. At least one ground must apply under British data protection law.
Article 17(3) of the UK GDPR sets out exceptions where the right does not apply. These include processing necessary for freedom of expression, compliance with a legal obligation in England and Wales, public health, archiving in the public interest, and establishing, exercising or defending legal claims.
Under Article 17(2) of the UK GDPR, where the British controller has made the data public, it must take reasonable steps to inform other controllers processing the data that the data subject has requested erasure. This includes links, copies and replications of the data in the United Kingdom.
The UK ICO recognises that complete erasure from backup systems may not always be immediately feasible. However, the British organisation should put the data beyond use and ensure it is deleted from backups when they are next recycled. The organisation should not actively use backup data after a UK erasure request.
Take control of your personal data and request its deletion. Fill in the details, preview your request and download it as a PDF in minutes.
Free PDF · Editable Word with Expert · No account required