Data Erasure Request

Data Erasure Request Ireland: Your Guide to the Right to be Forgotten

Under the General Data Protection Regulation (GDPR), individuals in Ireland have a fundamental right to control their personal data. This includes the right to request its erasure, often referred to as the 'Right to be Forgotten'. Submitting a formal data erasure request is the key step to exercising this right. This guide and the accompanying template are designed to help you navigate this process effectively within the Irish context.

What is a GDPR Data Erasure Request?

A Data Erasure Request is a formal, written communication you send to an organisation (the 'data controller') asking them to delete your personal data. Under GDPR, which is enforced in Ireland by the Data Protection Commission, you can make this request when certain conditions are met. For instance, if the data is no longer necessary for the purpose it was collected, you withdraw your consent, or the data has been unlawfully processed. It's important to understand that this right is not absolute and has specific exemptions, which we will cover later.

How to Use the Data Erasure Request Form Template

Our template provides a structured, ready-to-use data erasure request form Ireland format. Using a dedicated form ensures your request is clear, contains all pertinent information, and is taken seriously by the recipient. To use it effectively:

1. Download the Template: Access the fillable document, which is available in an editable format.
2. Complete the Guided Sections: The form will prompt you for specific details about yourself, the organisation, and the data in question.
3. Review and Customise: Ensure all information is accurate. You can add specific details about your data or the reason for your request in the provided sections.
4. Submit Your Request: Send the completed form to the organisation's designated contact point for data protection matters, keeping a copy for your records.

Information Required to Complete the Form

To make a valid data removal request Ireland, you need to provide specific information to help the organisation identify you and your data. The template guides you to include:

• Your full name, contact address, and email.
• The name and address of the organisation you are addressing.
• A clear statement that you are making a request for erasure under the GDPR.
• Details to help identify your data (e.g., account numbers, usernames, specific services used).
• If applicable, the grounds for your request (e.g., data no longer needed, consent withdrawn).
• Your signature and the date.

Key Scenarios and Clauses Covered by the Template

The template is designed to be robust and cover common situations where you might need to request data deletion Ireland. It includes clauses and prompts for:

• Direct Erasure Requests: For when you want your data deleted from the organisation's primary systems.
• Requests to Third Parties: Acknowledging that the organisation may have shared your data with others and should inform them of the erasure.
• Specific Data Identification: Encouraging you to be as precise as possible to facilitate a swift process.
• Grounds for Request: Providing a space to reference the specific GDPR condition you are relying on.
• Confirmation and Follow-up: Structuring the request to necessitate a formal reply from the organisation.

The Right to be Forgotten in Irish and EU Law

The 'Right to be Forgotten' is a principle stemming from the GDPR and relevant case law. In essence, it is an aspect of the broader right to erasure, particularly relevant when personal data is made publicly available, such as in search engine results. In Ireland, this right is upheld by the Data Protection Commission and interpreted in line with guidance from the European Data Protection Board (EDPB). While the 'Right to Erasure' (Article 17 of GDPR) is the legal basis, the 'Right to be Forgotten' is often used in public discourse to describe the outcome of exercising this right in online contexts. It allows individuals to request the delisting or removal of personal data from online platforms where the data is outdated, irrelevant, or excessive.

How the Template Helps Exercise Your GDPR Rights

Using a standardised right to be forgotten form empowers you in several concrete ways:

• Clarity and Compliance: It ensures your request meets the formal requirements expected by organisations, reducing the chance of it being dismissed on technical grounds.
• Time Efficiency: It saves you time by providing a clear structure, so you don't have to draft a legal request from scratch.
• Record Keeping: It creates a clear, dated document that serves as proof of your request, which is vital if you need to follow up or complain to the Data Protection Commission.
• Focused Communication: It helps you provide all necessary details upfront, which can speed up the organisation's response time.

Frequently Asked Questions About Data Erasure

Can I request erasure of my data under GDPR?

Yes. The GDPR grants individuals in the EU, including Ireland, the right to request the erasure of their personal data under specific circumstances outlined in Article 17.

What is the right to erasure of personal data in Ireland?

It is your legal right to request that an organisation delete your personal data. This is a core GDPR right enforced by Ireland's Data Protection Commission when the data is inaccurate, processed unlawfully, or no longer necessary for the purpose it was collected.

Can you refuse a GDPR request for erasure?

Organisations can refuse a request if a specific legal exemption applies under GDPR. Common exemptions include when the data is needed for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest in the area of public health, or for the establishment, exercise, or defence of legal claims.

How long do you have to delete data under GDPR?

Organisations generally must respond to your request without undue delay and at the latest within one month of receipt. This period can be extended by a further two months for complex requests, but the organisation must inform you of this extension within the first month.

Can I ask a company to remove my data?

Absolutely. You have the right to ask any company that holds your personal data to remove it, provided one of the GDPR grounds for erasure applies. A formal data erasure request is the recommended way to do this.

What are the exemptions to the right to be forgotten?

Exemptions to the right to erasure include situations where processing is necessary for archiving purposes in the public interest, for scientific or historical research purposes, or for statistical purposes. It also may not apply if the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

How to request a right to be forgotten?

You start by submitting a formal data erasure request to the data controller. For online platforms like search engines, they often have a dedicated web form for such requests, but a written request using a template ensures you have a record.

What is the right to be forgotten under EU law?

It is a legal concept that allows an individual to request the removal of personal information from internet search results and other public platforms under certain conditions, as an extension of the right to erasure under the GDPR.

How do I request a right to be forgotten from Google?

Google provides a specific removal request tool for EU citizens based on the GDPR. You would typically use their online form, but you can also send a formal written request referencing the GDPR to their data protection officer.

How to make a data deletion request?

The most effective method is to use a clear, written request. Our template provides a ready-made structure for a data deletion request, ensuring you include all necessary legal and identifying information.

Can you request your data be deleted?

Yes, this is a core right under the GDPR. You can request deletion, and the organisation must comply unless a specific exemption is applicable.

Can you request data deletion under GDPR?

Yes, requesting data deletion is the exercise of the 'right to erasure' under Article 17 of the GDPR. It is a legally enforceable right for individuals within the EU.

What to Do If Your Request is Refused

If an organisation refuses your data erasure request Ireland, they must provide a valid reason based on a GDPR exemption. If you believe the refusal is unjustified, your first step is to lodge a complaint directly with the organisation, outlining your concerns. If the issue remains unresolved, you can formally complain to the Data Protection Commission in Ireland. The Data Protection Commission is the national supervisory authority responsible for enforcing data protection law. When lodging a complaint, provide them with all relevant documentation, including a copy of your original request and the organisation's response. Specific examples of when you might use such a request include when a company continues to hold data after you've closed an account, or when information you provided for a specific service is being used for marketing purposes without your consent.

Download your Data Erasure Request form now!