Right to be forgotten

A data subject may request that any information held on them is deleted or removed and any third parties who process or use that data must also comply with the request.  An erasure request can only be refused if an exemption applies.