NIST Privacy Framework, Control-PCT.DM-P4

Erase personal data on request without undue delay where it is no longer necessary, consent is withdrawn with no other lawful basis, the data subject objects with no overriding ground, it was processed unlawfully, a legal obligation requires erasure, or it was collected under the child information-society-service consent rule, and de-reference it if you operate a search engine indexing it.

Terminate processing of a personal data subject's personal data, including erasing it, within fifteen days of a demand made in the absence of a legal basis for the processing, or, where erasure is not technically possible, restrict further processing instead, under Article 13.

Remove, on request, personal data about a person's past private life that was collected and made public on a website, whether or not it is indexed by a search engine.

Erase a person's personal data and end its distribution on request, including data made available while they were a minor, where it is no longer necessary, where consent is withdrawn, where the processing lacks a legal ground, or for another legitimate reason, and tell every third party the data were disclosed to that removal is sought.

Erase personal data on request within thirty days where it is no longer necessary, was unlawfully processed, or the data subject withdrew consent with no other legal basis remaining, and where you had made the data public, take reasonable technical steps to tell any third party processing it that erasure was requested.

Erase a data subject's personal data without undue delay on request, including the right to be forgotten reaching search engine results and other data holders, subject only to this Law's listed exceptions.

Erase personal data on request, free of charge and without excessive delay, where it is no longer necessary for its purpose, where consent is withdrawn and no other ground applies, where the data subject objects and no overriding legitimate ground exists, or where it was processed unlawfully, and take reasonable steps to tell third parties processing data you made public.

On request, erase without delay personal data you collected in offering an information society service from a person who was a minor in France when you collected it, and take reasonable steps, technical ones included, to tell any controller you passed it to that the person asked for erasure of any link to, copy or reproduction of it, under Loi n. 78-17 Article 51 II.

Delete personal data on request where it is no longer necessary for the purpose you collected it for, where consent is withdrawn, or where the processing is unlawful.

Erase personal data on request without undue delay where it is no longer necessary, consent is withdrawn with no other lawful basis, the data subject objects with no overriding ground, it was processed unlawfully, a legal obligation requires erasure, or it was collected under the child information-society-service consent rule.

If you are an organisation that is a large digital platform, destroy an individual's personal information on request, subject to listed exceptions (draft Australian Privacy Principle 14).

Delete a minor user's account, or their personal information at a parent's or guardian's request, within forty-five calendar days of the request.

As a social media platform, honour a minor's request to unpublish or delete their account (effective July 1, 2024).