Search for your own name online and you might find an old news story, an outdated post, or information that no longer reflects who you are, but still shows up whenever someone looks you up. In Europe, you have a legal right to do something about that: the right to be forgotten.
This right came from a 2014 ruling by the Court of Justice of the European Union, and it is now written into the General Data Protection Regulation (GDPR). In simple terms, it means you can ask for your personal data to be erased. You can use this right in specific situations:
- The data is no longer needed for the purpose it was originally collected for.
- You withdraw your consent for it to be processed.
- You object to the processing and there is no strong legitimate reason for it to continue.
- The data was processed unlawfully in the first place.
- Erasing it is required to comply with a legal obligation.
How to actually use it
In practice, you request this through the online forms provided by search engines like Google, Bing, or Yahoo. There is no strict deadline to submit a request, but it is worth acting sooner rather than later to protect your privacy.
The search engine will then assess your request against the GDPR and Spanish law, specifically Organic Law 3/2018 on Personal Data Protection and Digital Rights Guarantee. If your request is refused, or you disagree with the decision, you can escalate it to the Spanish Data Protection Agency (AEPD) and file a complaint.
If you are still not satisfied after the AEPD rules on your case, you have two more options. You can request that the AEPD reconsider its decision, or you can take the matter to the administrative courts.
In short, the right to be forgotten exists so that outdated or unwanted personal information does not stay online indefinitely against your wishes. It gives you real control over your digital footprint and protects your privacy and reputation in a world where old information can otherwise follow you forever.
