Primary document · European Union
General Data Protection Regulation, Article 17: Right to erasure
What it says
A company must erase personal data 'without undue delay' when, for example, it is no longer needed or consent is withdrawn. The article sets no day count and says nothing specific about backups.
A summary of a public document, not legal advice.
