UK privacyJune 28, 20266 min read

How to Get Your Data Deleted in the UK (Erasure and Google Delisting)

By Scott Anderson, Clearfront maintainer

In the UK you have a real, enforceable right to make organizations delete your personal data, and a separate route to hide pages from Google searches of your name. They do different things, and to actually clean up your footprint you usually need both. Here is how each one works. This is general information, not legal advice.

What is the UK right to erasure?

The right to erasure, in Article 17 of the UK GDPR, lets you ask an organization to delete your personal data. It is not absolute, but it covers most everyday situations, and the organization must respond within one calendar month.

This is the strongest tool a UK resident has for cleaning up their footprint, and Americans do not have a national equivalent. You can use it against a data broker, a website, or any company holding your data. The ICO plain-English guide is Your right to get your data deleted.

When erasure applies, and when it does not

You can ask for erasure when the data is no longer needed, when you withdraw consent, when you object and there is no overriding reason to keep it, or when it was used unlawfully. It does not override things like legal obligations, journalism, or the defense of legal claims.

In practice, a data broker profiling you for resale has a weak case to keep your data once you object, which is why erasure works well against people-search sites. A newspaper archive or a statutory record is a different matter and often exempt.

How to send an erasure request

  1. 1.Contact the organization: you can use any part of it, and the request can be verbal or in writing, though writing is better for proof
  2. 2.Say you are exercising your right to erasure under UK GDPR and specify what to delete
  3. 3.They cannot charge a fee in most cases and must respond within one calendar month
  4. 4.If they refuse, they must explain why and tell you about your right to complain

The ICO provides a letter template on its page above. Put it in writing and keep a copy.

What is Google delisting, and how is it different?

Google delisting, the right to be forgotten, hides a page from Google results for searches of your name. It does not delete anything. The page stays live and still appears for other searches.

This is the point people miss. Delisting is not erasure. If a page about you is defamatory or outdated, delisting stops it surfacing when someone Googles your name in the UK or EU, but the page itself remains online. You request it through Google’s right to be forgotten process, and Google weighs your privacy against the public interest, so requests about public figures are less likely to succeed.

Removing your contact details from Google

Google also has a separate tool, Results about you, that finds search results showing your phone number, home address, or email and lets you request their removal.

It is worth running alongside delisting. The Results about you tool monitors for your contact details in search and can alert you. As with delisting, removing a result from Google does not remove the information from the site hosting it.

Use both, then escalate if ignored

For a page a data broker controls, send an erasure request to the broker and separately ask Google to delist it. If the broker ignores you, complain to the ICO for free.

Erasure removes the data at source; delisting hides it from name searches. Doing both closes the gap. If an organization refuses an erasure request without good reason or simply goes quiet, escalate to the ICO at ico.org.uk/make-a-complaint; the ICO expects you to have raised it with the organization first. To find what is out there before you start, run the UK footprint self-audit.

Frequently asked questions

How long does an organization have to delete my data?
One calendar month from your request. It can extend by up to two more months for complex requests, but it must tell you within the first month and explain why.
What is the difference between erasure and the right to be forgotten?
Erasure deletes your data at the organization holding it. The right to be forgotten, or Google delisting, only hides a page from Google searches of your name; the page stays online. For a full cleanup you usually need both.
Can I be charged to have my data deleted?
In most cases, no. An organization can only charge a reasonable fee if your request is manifestly unfounded or excessive, which is uncommon for a straightforward deletion.

Scott Anderson believes your personal data is yours to own and protect. He built Clearfront, a free, open-source tool for scanning and scrubbing your own digital footprint from public data, and he writes about OSINT, breach exposure, and personal privacy.