Right to Delete
Definition
A consumer's right to request that a business delete the personal data it has collected about them. The business must also direct its service providers and contractors to delete the data. There are exceptions for data needed for legal claims, regulatory compliance, security, and completing transactions.
Legal Definition
Under the CCPA (Cal. Civ. Code 1798.105): "A consumer shall have the right to request that a business delete any personal information about the consumer which the business has collected from the consumer." Under the VCDPA (Va. Code 59.1-577): consumers have the right "to delete personal data provided by or obtained about the consumer."
State Laws Using This Term
Practical Example
A consumer asks an online retailer to delete their account and all associated data. The retailer must delete the data from its own systems and instruct its payment processor, email service provider, and other service providers to do the same.
Related Terms
Frequently Asked Questions
Can a business refuse a deletion request?
Yes, in certain circumstances. Common exceptions include data needed to complete a transaction, detect security incidents, comply with legal obligations, exercise free speech, or conduct research in the public interest. Businesses must explain any denial to the consumer.