Right to Erasure Request Letter: Free Template and What to Include

If you need to request deletion of personal data under UK GDPR right to be forgotten, a written letter is the recommended first step — it creates a clear record and shows you're pursuing the matter formally. Below is what a strong right to erasure request should include.

What this letter needs to cover

• State the legal ground for erasure (data no longer necessary, consent withdrawn, or unlawfully processed — specify from situation)
• Request confirmation that all data has been deleted or anonymised
• Request response within one month
• Note right to complain to ICO if request refused

What the "right to be forgotten" actually covers

Under UK GDPR, you can request deletion of your personal data in specific circumstances — most commonly where it's no longer needed for the purpose it was collected, you withdraw consent an organisation relied on, or the data has been processed unlawfully. It isn't an unlimited right; organisations can refuse where they have a legal obligation to retain data, or a genuine ongoing need such as an active contract.

What to include before you send it

• Which organisation holds the data and what specifically you want deleted
• Which of the specific erasure grounds applies to your situation
• A request for confirmation once the deletion has taken place
• A request for details of any third parties the data was shared with, so they can be notified too

When an organisation can lawfully refuse

Common valid reasons for refusal include a legal requirement to retain the data (such as tax records), an ongoing contract that still requires the data, or genuine public interest grounds like scientific research. A refusal should always come with a clear explanation of which specific ground applies — a vague refusal isn't sufficient.

Frequently Asked Questions

How long does an organisation have to respond?
Generally one month from receiving your request, extendable by a further two months for genuinely complex requests, provided they explain the delay.

What if they refuse and I disagree?
You can complain to the Information Commissioner's Office if you believe the refusal isn't properly justified.

[Your Name]
[Your Address]
[Your Postcode]
[Your Email Address]
[Your Phone Number]
[Name of Organisation]
[Address Line 1]
[Address Line 2]
[Postcode]
[Date]

Dear [Name of Contact or "Data Protection Officer"],

Subject: Request for Erasure of Personal Data (Right to be Forgotten)

I am writing to formally ask you to erase the personal data you hold about me.

Under Article 17 of the UK General Data Protection Regulation (UK GDPR), I have the right to have my personal data erased in certain circumstances. I believe you should erase my data because [choose the one that applies: you no longer need it for the purpose you collected it for / I am withdrawing my consent / I object to you processing it and you have no overriding legitimate reason to keep it / it has been processed unlawfully].

To help you find my information, my details are:
• Full Name: [Your Name]
• Account/Reference Number: [customer or account number]
• Other Identifying Details: [e.g. date of birth or old address]

Please delete all of my personal data, except any you are legally required to keep. If you have shared my data with others, please tell them about this request.

Under the UK GDPR, you must respond without undue delay and within one calendar month at the latest. Please confirm in writing once my data has been erased. If you refuse, please tell me why; I may then complain to the Information Commissioner's Office.

Yours sincerely,

[Your Signature]
[Your Printed Name]