The Right to Be Forgotten: How to Request Data Deletion in 2026

Have you ever received a marketing email from a company you haven't bought from in ten years? Or perhaps you found an old, embarrassing forum post from your youth that is still showing up in Google search results. It feels like the internet has a 'permanent memory,' and once you give a company your home address or email, they own it forever. In the past, that was true. But the legal landscape of the UK changed significantly with the Data Use and Access Act 2025 and the existing gdpr regulations.

You now have a powerful legal tool called the 'Right to Erasure' (commonly known as the 'Right to be Forgotten'). This means you can legally force any company in the UK or EU to delete every single piece of information they hold about you. If you are asking how to request data deletion from company uk or want a gdpr right to be forgotten how to use guide, this is for you. Reclaiming your data is the most effective way to shrink your target profile and improve your online privacy.

When Can You Demand Deletion?

Under the 2026 UK laws, you can demand a company delete your data if:

• The data is no longer needed for the original reason they collected it (e.g., you've closed your account).
• You withdraw your consent (e.g., you no longer want their marketing).
• The data was processed unlawfully or contains a mistake.
• The data was collected from you when you were a child.

Step-by-Step: How to Make a Request

You do not need a lawyer or a formal document. You can make a request to anyone in the company, either verbally or in writing. However, a written email is always best because it creates a 'paper trail' that the Information Commissioner's Office (ICO) can use if the company refuses.

What Happens Next?

The company has **one month** to comply. They cannot charge you a fee for this. They may ask you to provide a copy of your ID (like a utility bill or driver's license) to prove you are really you—this is a normal part of identity protection and you should comply. Once they are satisfied, they must not only delete your data from their 'active' list but also from their backup servers.