How long does a GDPR erasure request take, and what if the company ignores it?

Question

Accepted Answer

Under GDPR Article 12(3), a company must act on your erasure request "without undue delay and in any event within one month" of receiving it. It can extend by two further months if the request is complex or it has many requests, but it must tell you about the extension and the reasons within the first month. Requests are free unless manifestly unfounded or excessive (Article 12(5)). Article 17 grounds include: the data is no longer needed, you withdraw consent, you object to direct marketing (Article 21(2), which the company must always honor), or the processing was unlawful; exemptions cover free expression, legal obligations and legal claims. If the deadline passes, Article 77 lets you lodge a complaint with your national data protection authority (the EDPB lists them; the UK equivalent is the ICO), and Articles 79 and 82 allow a court claim and compensation. Build a request citing the right articles at https://takeitdown.agentexchange.work/request/privacy.

How long does a GDPR erasure request take, and what if the company ignores it?

Related