What Is the Right to Be Forgotten and Can You Actually Use It?

Where the Right to Be Forgotten Actually Comes From

The right to be forgotten originated in the European Union, formalized through a landmark 2014 court ruling and later reinforced under the General Data Protection Regulation, or GDPR. It gives individuals in the EU the right to request that search engines and certain data holders remove specific personal information under defined circumstances – primarily when the information is outdated, irrelevant, or no longer serves a legitimate public interest.

Crucially, this isn't a blanket right to erase anything unflattering about yourself. It's a specific legal mechanism, with defined criteria, that search engines and companies are required to evaluate on a case-by-case basis, weighing your privacy interest against the public's legitimate interest in the information.

Why It Doesn't Work the Same Way Everywhere

The right to be forgotten is primarily an EU legal framework, and its reach outside the EU is limited. In the United States, there is no equivalent nationwide right – individual privacy protections exist, but nothing structured quite like the EU's mechanism for compelling removal of lawfully published, truthful information from search results or the internet at large.

Some US states have passed narrower privacy laws – California's Consumer Privacy Act, for example, gives residents specific rights regarding data collected by companies, but it functions differently than the EU's right to be forgotten and doesn't provide the same broad mechanism for delisting search results about you.

What You Can Actually Request Under GDPR

If you're in the EU, you can submit a request directly to a search engine – Google has a dedicated removal request process – asking for specific URLs to be delisted from search results tied to your name. Search engines evaluate each request against criteria including whether the information is inaccurate, outdated, excessive, or no longer relevant, weighed against factors like whether you're a public figure and whether there's a legitimate public interest in the information remaining accessible.

Important distinction: even a successful request typically only removes the content from search results tied to your name in EU versions of the search engine – it usually does not delete the underlying webpage itself, which may still exist and be found through other search terms or directly.

What Happens if You're Outside the EU

Without an equivalent legal right, options are more limited and more manual. You can still request content removal directly from a website owner, though they're under no EU-style legal obligation to comply unless local law requires it. Some search engines offer limited voluntary removal processes for specific categories of content – like non-consensual explicit images or exposed personal information such as financial details – regardless of your location, but this is different from a legally enforceable right to be forgotten.

Data broker opt-out processes are another practical avenue. Many data broker sites that compile and sell personal information offer opt-out request forms, though the process is often manual, must be repeated across dozens of individual sites, and data frequently reappears over time as brokers re-aggregate information from public records.

Realistic Expectations

Even where the right to be forgotten legally applies, it's not a guarantee – requests are evaluated individually, and plenty are denied, particularly when the information relates to matters of legitimate public interest, such as information about public figures or serious past legal proceedings. Outside the EU, removing unwanted personal information from the internet is generally a slower, more manual, and less legally guaranteed process, often requiring persistence across multiple platforms and services.

What to Avoid

Don't assume a single successful delisting request removes information from the internet entirely – in most cases it only affects search visibility in specific circumstances, not the underlying content itself.

Avoid paying for services promising to guarantee removal of unwanted online information, especially internationally, without researching their actual methods and success rate first – some of these services oversell what they can realistically achieve, given how limited enforceable removal rights are outside specific legal frameworks.

Don't wait to act if the content involves genuinely harmful material like exposed financial information or non-consensual imagery. Search engines and platforms typically have expedited processes for these more serious categories that don't require the broader right-to-be-forgotten framework at all.

FAQ

Does the right to be forgotten apply to me if I don't live in the EU? Generally not in its full legal form – the strongest version of this right applies specifically to EU residents under GDPR, though voluntary and narrower removal options exist elsewhere.

Can I request removal of true, accurate information about myself? Sometimes, if it's outdated or no longer relevant to legitimate public interest, but accuracy alone doesn't guarantee removal – the evaluation weighs several factors together.

What's the difference between removing something from search results and removing it from the internet entirely? Delisting typically only affects whether a page shows up in search results tied to your name – the actual webpage generally remains live and can still be found through other means unless the website itself removes it.

The right to be forgotten is a real, meaningful legal tool, but it's narrower and more regional than its name suggests. Knowing exactly what it covers – and what it doesn't – helps set realistic expectations for anyone trying to manage their digital footprint.