Right to Be Forgotten Requests - How They Work in 2026
The right to be forgotten gives individuals the power to request that search engines and certain websites remove links to personal information that is outdated, irrelevant, or harmful. It is not a magic eraser. Approved requests remove a URL from search results in specific regions without necessarily deleting the original content from the web. Understanding what the process actually involves saves you from wasted effort and false expectations.
What the Right to Be Forgotten Actually Covers
The right applies primarily within the European Union and EEA under GDPR, and has limited applicability in the United States. A few US states have introduced partial data deletion rights under laws like the CCPA, but these are narrower in scope and do not mirror the EU's framework. Brazil's LGPD and the UK's post-Brexit UK GDPR offer similar mechanisms, though UK enforcement operates independently since 2021.
The right covers personal information that meets at least one of several grounds: the data is no longer necessary for its original purpose, you have withdrawn consent, or the data was processed unlawfully. News articles about public figures, court records that are still legally relevant, and content in the public interest are frequently denied. Sensitive private details, old minor offenses, and obsolete professional information are more likely to succeed.
How to File a Right to Be Forgotten Request
Google handles the largest volume of these requests globally and provides a dedicated removal form at its Search Help center. You fill in the URLs you want removed, choose the legal basis (GDPR or a country-specific equivalent), and describe why the information is irrelevant or harmful to you. Supporting documentation, such as a government-issued ID or a court order, strengthens your case significantly.
Each search engine must be approached separately. Bing, Yahoo, and DuckDuckGo each publish their own delisting request forms. Filing with Google alone leaves results visible on other engines, so a thorough campaign covers all major platforms where the content appears.
For data held directly by websites rather than indexed by search engines, you contact the site's data controller or privacy officer. GDPR Article 17 gives you the right to request erasure directly from the organization holding your data. If that organization refuses without a valid reason, you can escalate to your national data protection authority.
Jurisdictions That Honor These Requests
GDPR-covered regions enforce the most robust version of the right. EU and EEA residents can file requests that legally compel search engines to evaluate and, where appropriate, comply. The UK mirrors GDPR obligations under its own legislation. Outside these zones, your options depend heavily on local law.
In the US, there is no federal right to be forgotten. California's CCPA lets residents request deletion of personal data held by businesses, but this does not extend to search engine delisting the way GDPR does. Countries like Canada, Japan, and South Korea have data protection frameworks that include some erasure provisions, though enforcement intensity varies.
The Right to Be Forgotten GDPR Process - Step by Step
Start by identifying every URL containing the information you want removed. A spreadsheet with the exact URLs, the search engine where the result appears, and a brief note on why each qualifies keeps the process organized. Requests submitted without clear reasoning are frequently rejected outright.
Submit the Google form at support.google.com/websearch. Google reviews each URL individually against its removal criteria. The timeline typically runs from a few days to several weeks depending on complexity and volume. Removal is never guaranteed; Google evaluates each request against its policies and may reject URLs it considers newsworthy or in the public interest.
After submission, track your results by searching for the original terms weekly. Approved removals take effect in the specific geographic region tied to your request. A result delisted from google.co.uk may still appear on google.com when accessed outside the EU. If Google rejects your request and you believe the decision is wrong, you can appeal through Google's own reconsideration process or file a complaint with your national data protection authority.
When to Escalate to a Data Protection Authority
If a company ignores your erasure request or provides an unsatisfactory response, most EU member states have a dedicated supervisory authority. In Germany that is the BfDI; in France, the CNIL; in Ireland, the DPC. Filing a complaint is free and gives the authority legal power to investigate and enforce compliance.
Bringing in a specialist can make sense for complex cases. Professional content removal services typically charge $100–$500 per URL, though the fee does not guarantee success. For broader reputation campaigns involving multiple negative search results, a full suppression effort often involves a setup fee of $1,000–$10,000 followed by an ongoing monthly retainer typically in the $500–$3,000 range for personal reputation management.
What Happens After a Successful Request
Approved URLs are removed from search results in the applicable region, not from the internet itself. The original page remains live; it simply becomes harder to find through a localized search. Journalists, academics, and users accessing results from outside the covered region may still find the content.
Google and other search engines notify website owners that a URL has been delisted, without identifying who filed the request. Some publishers record these notices through the Lumen Database, a Harvard project that archives takedown requests. That means a successful removal is not entirely invisible; the fact that a delisting occurred can itself be publicly documented.
Alternatives When Removal Is Denied
Search result suppression is the most practical route when a removal request fails. This involves publishing and promoting positive, accurate content about yourself so that unfavorable links drop below the first page of results. Measurable progress typically takes 3–6 months, and full displacement of first-page results can take 6–12 months depending on the strength and age of the negative content.
Reputation monitoring tools in the SMB tier cost $50–$300 per month and give you visibility into where your name appears online so you can catch new content quickly. Responding proactively to accurate but unflattering content, correcting factual errors through right-of-reply requests, and maintaining active professional profiles on high-authority sites all support a long-term strategy. No single tactic works alone, but combining suppression with active profile management produces consistent results over time.
Frequently Asked Questions
How Do I File a Right to Be Forgotten Request?
Visit the Google Search removal form at support.google.com/websearch and list the specific URLs you want delisted, the legal basis (such as GDPR), and why the information is outdated or harmful. Each search engine has its own form, so you need to file separately with Bing, Yahoo, and others where the content appears. Supporting documents like a government-issued ID strengthen your case.
What Is the Right to Be Forgotten GDPR Process?
Under GDPR, EU and EEA residents can request that search engines and data controllers erase personal information that is no longer necessary, was processed without valid consent, or was processed unlawfully. You submit a request directly to the organization holding your data or use a search engine's delisting form. If they refuse without a lawful reason, you can escalate to your national data protection authority, such as the CNIL in France or the ICO in the UK.
Does the Right to Be Forgotten Apply in the United States?
There is no federal right to be forgotten in the United States. California's CCPA lets residents request deletion of personal data held by businesses, but this does not extend to search engine delisting the way GDPR does in the EU and EEA. Other US states have partial data deletion rights, though none match the scope of Europe's framework.
Will a Successful Removal Request Delete the Content from the Internet?
No. An approved delisting request removes the specific URL from search results in the applicable geographic region, but the original page remains live on the web. People accessing search results from outside the covered region, or using direct links, may still find the content. Some removals are also logged in public databases like the Lumen Database.
What Can I Do If My Right to Be Forgotten Request Is Denied?
You can appeal through the search engine's own reconsideration process or file a formal complaint with your national data protection authority. If the content itself cannot be removed, search result suppression is a practical alternative: publishing authoritative positive content can push unfavorable links below page one, with measurable results typically appearing within 3–6 months.