Right to Erasure Request Letter Template & Generator
How to request deletion of personal data under UK GDPR right to be forgotten — the wording that matters, your rights, and a free generator to create it instantly.
← All Letter Templates & Generators · Data Protection & GDPR · Last updated 18 August 2026 · Written and reviewed by Matt Thompson, founder of UK Work Rights
This is free rights guidance, not legal advice. For advice specific to your situation, see our About page or contact Citizens Advice.
If you need to request deletion of personal data under UK GDPR right to be forgotten, a written letter is the recommended first step — it creates a clear record and shows you're pursuing the matter formally. Below is what a strong right to erasure request should include, plus a free tool to generate yours.
What this letter needs to cover
- State the legal ground for erasure (data no longer necessary, consent withdrawn, or unlawfully processed — specify from situation)
- Request confirmation that all data has been deleted or anonymised
- Request response within one month
- Note right to complain to ICO if request refused
What the "right to be forgotten" actually covers
Under UK GDPR, you can request deletion of your personal data in specific circumstances — most commonly where it's no longer needed for the purpose it was collected, you withdraw consent an organisation relied on, or the data has been processed unlawfully. It isn't an unlimited right; organisations can refuse where they have a legal obligation to retain data, or a genuine ongoing need such as an active contract.
What to include before you send it
- Which organisation holds the data and what specifically you want deleted
- Which of the specific erasure grounds applies to your situation
- A request for confirmation once the deletion has taken place
- A request for details of any third parties the data was shared with, so they can be notified too
When an organisation can lawfully refuse
Common valid reasons for refusal include a legal requirement to retain the data (such as tax records), an ongoing contract that still requires the data, or genuine public interest grounds like scientific research. A refusal should always come with a clear explanation of which specific ground applies — a vague refusal isn't sufficient.
Frequently Asked Questions
How long does an organisation have to respond?
Generally one month from receiving your request, extendable by a further two months for genuinely complex requests, provided they explain the delay.
What if they refuse and I disagree?
You can complain to the Information Commissioner's Office if you believe the refusal isn't properly justified.
Ready to write yours?
Answer a few questions and get a professionally drafted letter, ready to send — free, no account needed.
✉️ Generate This Letter Free →Related reading
Comments
Comments are loading…
