Right to Erasure
The right to erasure (the "right to be forgotten", Article 17 GDPR) allows individuals to request, under certain conditions, that a company delete the personal data it holds about them.
In practice
Companies generally have one month to process such requests and must check whether statutory retention obligations – under tax law, for instance – stand in the way of immediate deletion. Assigning clear internal responsibility for erasure requests saves time pressure and mistakes when one arrives.