Type to search

Compliance Definitions Editorials

Can You Delete Yourself Online? The Truth About the Right to Be Forgotten

Share
Right_to_be_forgotten

In today’s digital-first world, personal information spreads faster than ever. From old social media posts to outdated news reports, what you shared—or what others posted about you—can linger online indefinitely. This has sparked global conversations about the “Right to Be Forgotten” (RTBF), a principle rooted in privacy and data protection laws.

But what does this right actually mean in practice? Can you really erase your past from the internet? And how does it balance with freedom of expression and public interest?

This article breaks down the Right to Be Forgotten in simple, practical terms while drawing from real-world examples, global regulations, and expert insights.

What is the Right to Be Forgotten?

The Right to Be Forgotten refers to a person’s ability to request the removal of personal information from online platforms, search engines, or databases when that information is inaccurate, irrelevant, outdated, or excessive.

It is not an absolute right—it must be balanced against other considerations, such as freedom of speech and public interest.

Origins of the Right to Be Forgotten

The concept gained international recognition in 2014, when the Court of Justice of the European Union (CJEU) ruled in favor of Mario Costeja González, a Spanish citizen who requested Google remove search results linking to an old debt notice about him.

This landmark ruling clarified that:

  • Individuals could ask search engines to delist certain results.
  • Search engines, not just publishers, were responsible for processing such requests.

Since then, the right has been formally recognized in Article 17 of the EU’s General Data Protection Regulation (GDPR) as the “Right to Erasure.”

How the Right to Be Forgotten Works

Situations Where You Can Request Erasure

You may request removal of personal data if:

  • The data is no longer necessary for the purpose it was collected.
  • You withdraw consent previously given.
  • The data has been processed unlawfully.
  • The information is inaccurate, outdated, or excessive.
  • You were a minor at the time the data was collected.

Limitations

Your request may be denied if the data is needed for:

  • Freedom of expression and information (e.g., journalism).
  • Public interest in areas such as health, crime, or governance.
  • Legal obligations requiring the retention of certain records.

Global Perspectives on the Right to Be Forgotten

Region/CountryLegal FrameworkApplication of RTBF
European UnionGDPR (Article 17)Strong enforcement, especially for search engines and platforms.
United StatesNo federal RTBF lawProtected by strong First Amendment rights, though some states consider narrow versions.
NigeriaNigeria Data Protection Act (NDPA)Provides limited erasure rights but lacks full RTBF scope seen in EU.
CanadaPrivacy laws under PIPEDADebates ongoing about whether delisting should apply.
IndiaDraft Digital Personal Data Protection ActIncludes erasure rights, still under legislative evolution.

Real-Life Examples

  1. Mario Costeja González vs Google (2014):
    Google was required to remove links to outdated debt-related information from its search results.
  2. Politicians and Public Figures:
    Requests from public figures are often denied if the information relates to public accountability. For example, a politician’s corruption case may remain online for the public interest.
  3. Revenge Porn Cases:
    In many jurisdictions, RTBF requests have been crucial for victims to remove non-consensual intimate images.

Challenges and Controversies

  • Freedom of Speech vs Privacy: Critics argue RTBF may lead to censorship.
  • Jurisdiction Issues: Should a delisting apply only in the EU, or globally? Google initially resisted global application but later applied localized removals.
  • Technology Limits: Complete erasure is almost impossible; content may still exist on servers, backups, or alternative platforms.

Practical Steps: How to Exercise Your Right to Be Forgotten

  1. Contact the Data Controller:
    Start by contacting the organization or platform holding your data.
  2. Submit a Formal Request:
    Many search engines (like Google) provide RTBF request forms.
  3. Provide Evidence:
    Explain why the data is inaccurate, irrelevant, or harmful.
  4. Appeal if Denied:
    You may escalate to your national data protection authority if your request is rejected.

FAQs

Q1. Can I ask Google to delete everything about me?
No. Google evaluates requests case by case. Data in the public interest or necessary for freedom of expression is usually retained.

Q2. Does the Right to Be Forgotten delete data from the internet completely?
Not exactly. It usually means delisting from search results, making it harder for the public to find—but the original content may still exist on the publisher’s website.

Q3. Does the United States recognize the Right to Be Forgotten?
No federal law exists. The U.S. leans heavily on freedom of speech, but limited erasure rights exist for minors under certain laws.

Q4. Can Nigerian citizens exercise this right?
Yes, under the NDPA (2023), Nigerians have rights to request deletion of certain data, though it is not as expansive as the EU’s GDPR.

Q5. Is RTBF the same as Data Erasure?
Not entirely. RTBF focuses on public visibility online, while data erasure may involve permanent deletion from databases.

Conclusion

The Right to Be Forgotten is not about rewriting history—it’s about ensuring that outdated, irrelevant, or harmful personal information does not unfairly define you in the digital age.

While its implementation varies worldwide, one thing is clear: individuals are gaining more control over their digital footprints. As businesses, organizations, and individuals adapt, striking the balance between privacy, accountability, and freedom of expression will remain at the heart of the debate.

For those concerned about their online reputation, the key takeaway is this:

  • You can’t erase your past entirely, but you can control how visible it remains.
Tags:
ikeh James

Ikeh Ifeanyichukwu James is a Certified Data Protection Officer (CDPO) accredited by the Institute of Information Management (IIM) in collaboration with the Nigeria Data Protection Commission (NDPC). With years of experience supporting organizations in data protection compliance, privacy risk management, and NDPA implementation, he is committed to advancing responsible data governance and building digital trust in Africa and beyond. In addition to his privacy and compliance expertise, James is a Certified IT Expert, Data Analyst, and Web Developer, with proven skills in programming, digital marketing, and cybersecurity awareness. He has a background in Statistics (Yabatech) and has earned multiple certifications in Python, PHP, SEO, Digital Marketing, and Information Security from recognized local and international institutions. James has been recognized for his contributions to technology and data protection, including the Best Employee Award at DKIPPI (2021) and the Outstanding Student Award at GIZ/LSETF Skills & Mentorship Training (2019). At Privacy Needle, he leverages his diverse expertise to break down complex data privacy and cybersecurity issues into clear, actionable insights for businesses, professionals, and individuals navigating today’s digital world.

  • 1

Leave a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.