GTM Dictionary

The Go-to-Market Dictionary: Right to be Forgotten

Learn about the Right to be Forgotten, a crucial concept in the Go-to-Market Dictionary.

In today's digital age, data privacy has become one of the most significant concerns not only for individuals but also for policymakers around the world. One of the most controversial and most debated issues in the world of data privacy is the "right to be forgotten." The right to be forgotten, also known as the right to erasure, provides people with the ability to request the removal of their personal information from online platforms. In this article, we'll take a closer look at the right to be forgotten, its origins, its legal background, and its impact on global privacy laws.

Understanding the Right to be Forgotten

The right to be forgotten is a legal concept that has gained increasing importance in recent years, particularly with the advent of social media and the proliferation of data sharing online. It provides individuals with the right to request the removal of their personal data from online platforms when it is no longer needed or when it jeopardizes their privacy. This right has become a crucial aspect of data protection and privacy laws around the world.

Origins and Legal Background

The right to be forgotten originated in Europe and was first recognized in the 2014 European Court of Justice (ECJ) ruling in the case of Google vs. Spain. The case involved a man who wanted to have outdated and incorrect information about him removed from Google search results. The ECJ ruled that individuals have the right to request that search engines remove personal information that is "inadequate, irrelevant, or no longer relevant," even if it is legally published on a website.

Following the ruling, the European Union (EU) implemented the General Data Protection Regulation (GDPR) in 2018, which strengthened the right to be forgotten. The GDPR is a regulation that was implemented in May 2018 to protect individuals' personal data. The GDPR enhances the rights of data subjects, including the right to be forgotten, and imposes strict obligations on data processors and controllers.

Under the GDPR, companies that process personal data are obliged to remove the data if it's no longer needed or if a person withdraws their consent. This means that individuals have more control over their personal data and can request that it be deleted or removed from online platforms.

The European Union's General Data Protection Regulation (GDPR)

The GDPR is a comprehensive data protection regulation that applies to all EU member states. It aims to protect the privacy and personal data of individuals by regulating the way in which companies collect, store, and use their data. The GDPR enhances the rights of data subjects, including the right to be forgotten, and imposes strict obligations on data processors and controllers.

Under the GDPR, individuals have the right to request the deletion or removal of their personal data. The data controller, the organization responsible for processing the data, must erase the data without undue delay if one of the following applies:

  • The data is no longer necessary for the purpose for which it was originally collected.
  • The individual withdraws their consent.
  • The individual objects to the processing, and there are no other overriding legitimate grounds for processing the data.
  • The data has been unlawfully processed.
  • The data is required to be erased to comply with a legal obligation.

The GDPR has had a significant impact on data protection and privacy laws around the world. Many countries have either implemented similar regulations or are in the process of doing so.

The Impact on Global Privacy Laws

While the right to be forgotten is currently a legal concept in Europe, it has inspired policymakers around the globe to enact similar laws and regulations. In 2015, Argentina passed a data protection law that included a right to be forgotten provision similar to the GDPR. In 2019, California passed the California Consumer Privacy Act (CCPA), which provides California residents with the right to request the deletion of their personal information. Several other countries, including Brazil and India, are in the process of implementing similar laws.

The right to be forgotten is an important aspect of data protection and privacy laws around the world. It provides individuals with more control over their personal data and allows them to request that it be deleted or removed from online platforms. As technology continues to evolve, it is likely that the right to be forgotten will become an even more crucial aspect of data protection and privacy laws.

The Right to be Forgotten in Practice

While the right to be forgotten is an essential tool for protecting privacy, it can also be challenging to implement in practice. There are several steps involved in submitting a request, evaluating the request, and implementing the request. However, it is important to understand that this process is in place to ensure that personal data is only processed lawfully, fairly, and transparently.

How to Submit a Request

Individuals can submit a request for the removal of their personal data to the data controller, the organization responsible for processing the data. The request needs to be in writing and provide sufficient information to identify the data in question. It is recommended to include any relevant details, such as the purpose for which the data was collected, the date of collection, and the reason for the request. This will help the data controller evaluate the request more efficiently.

It is important to note that the right to be forgotten is not absolute. The data controller may refuse the request if they have a legal obligation to retain the data or if the data is necessary for the establishment, exercise, or defense of legal claims.

Criteria for Evaluating Requests

The data controller needs to evaluate each request on a case-by-case basis. The data controller will consider whether the data is accurate, relevant, and up to date. They will also consider whether the data is necessary for the purpose for which it was originally collected and whether there is a legal obligation to retain the data.

For example, if an individual requests the removal of their personal data from a medical database, the data controller will need to evaluate whether the data is necessary for the provision of healthcare services. If the data is necessary for the provision of healthcare services, the data controller may refuse the request.

The Role of Search Engines and Data Controllers

Search engines, such as Google, are often the first targets of right to be forgotten requests. However, they are not the data controllers, and their role is to evaluate and act on requests submitted to them by data controllers, such as website owners. Search engines will evaluate each request on a case-by-case basis and remove the data if it meets the criteria for removal.

It is important to note that the right to be forgotten is not a guarantee that personal data will be removed from the internet. The data may still exist on other websites or databases, and it may be challenging to remove it completely. However, the right to be forgotten provides individuals with more control over their personal data and the ability to protect their privacy.

Balancing Privacy and Freedom of Information

The right to be forgotten has sparked a heated debate about how to balance privacy concerns with the freedom of information. On the one hand, removing information from search results can limit access to information and potentially infringe on free speech. On the other hand, people have the right to protect their privacy and control how their personal data is used.

As technology advances and more personal information is shared online, the issue of privacy has become increasingly important. The right to be forgotten is just one aspect of this larger debate. Some argue that individuals should have control over their online identity and be able to remove information that is no longer relevant or accurate. Others argue that once information is shared online, it becomes part of the public record and should remain accessible.

The Debate on Censorship

Opponents of the right to be forgotten argue that it can be used as a tool for censorship and limiting access to information. They argue that information that is in the public interest, such as news articles or information about public figures, should remain accessible. They also argue that the right to be forgotten could be abused by individuals looking to remove negative information about themselves, even if that information is true and relevant.

However, proponents of the right to be forgotten argue that censorship is not the goal. Rather, they believe that individuals should have the right to control their personal data and how it is used. They argue that individuals should be able to remove information that is outdated or inaccurate, and that this can actually promote free speech by allowing individuals to express themselves without fear of being defined by their past actions or mistakes.

Protecting Personal Data vs. Public Interest

Proponents of the right to be forgotten argue that protecting an individual's personal data outweighs the public's right to know. They argue that outdated and inaccurate information can be harmful and damaging to a person's reputation and mental well-being. They also argue that individuals should have the right to control their own narrative and not be defined by past mistakes or embarrassing moments.

However, opponents of the right to be forgotten argue that the public's right to know is more important than protecting an individual's personal data. They argue that information that is in the public interest, such as information about public figures or news articles about important events, should remain accessible. They also argue that removing this information could limit transparency and accountability, which are important values in a democratic society.

The Role of Media and Journalism

The debate on the right to be forgotten has focused on the role of media and journalism. Journalists argue that the right to be forgotten can limit their ability to report on issues that are in the public interest, such as corruption or unethical behavior. They argue that the public has a right to know about these issues, and that removing information from search results could limit their ability to uncover and report on them.

However, others argue that journalists have a responsibility to report accurately and not to perpetuate harmful stereotypes. They argue that the right to be forgotten can actually promote responsible journalism by encouraging journalists to report on issues in a way that is fair and accurate, rather than relying on sensationalism or outdated information.

In conclusion, the right to be forgotten is a complex issue that requires careful consideration of both privacy concerns and the public's right to information. As technology continues to advance and more personal information is shared online, this debate is likely to continue for years to come.

Challenges and Limitations

While the right to be forgotten is a useful tool for protecting privacy, there are challenges and limitations to its implementation.

Cross-Border Enforcement

With the internet's global nature, enforcing the right to be forgotten can be challenging, especially when it comes to requests that cross borders. For example, a request from an individual in Europe to remove information from a website based in the United States can be challenging to enforce.

Technological Limitations

Implementing the right to be forgotten can also be difficult from a technological perspective. Search engines and data controllers need to ensure that the information is removed entirely and not just hidden from search results. Additionally, with the vast amount of data available online, removing information can be a daunting task.

The "Streisand Effect"

The "Streisand Effect" is a phenomenon where attempts to suppress information result in its further dissemination. In the context of the right to be forgotten, efforts to remove information can draw attention to it and generate more interest.

In Conclusion

The right to be forgotten is a legal concept that provides individuals with the ability to request the removal of their personal information from online platforms. While it is an essential tool for protecting privacy, the right to be forgotten has sparked a heated debate about how to balance privacy concerns with the freedom of information. The right to be forgotten faces challenges and limitations, but policymakers around the world are taking steps to implement similar laws and regulations. As technology continues to advance, data privacy concerns are likely to remain at the forefront of global policy discussions.