The Right to Erasure: What It Is & Why It Matters

What it is

The right to erasure, sometimes called the 'right to be forgotten' in some jurisdictions, refers to an individual's ability, in defined circumstances, to have personal information about them deleted. The idea is that information should not necessarily be kept forever and that individuals can, in some cases, ask for it to be removed.

Importantly, erasure is rarely an absolute right. It typically applies in particular situations and is balanced against other interests, such as legal requirements to keep certain records or a legitimate ongoing need for the information. A request does not automatically mean information must be deleted.

How erasure works differs significantly between jurisdictions. Some regimes, such as the GDPR, recognise a defined right to erasure, while Australian law approaches deletion and retention through its own principles. This explainer stays general, and the applicable rules should be confirmed for any situation.

Key requirements

At a conceptual level, handling erasure or deletion expectations generally involves:

• Recognising that individuals may, in some circumstances, ask for information to be deleted.
• Weighing such requests against legal and legitimate reasons to retain information.
• Disposing of information securely where deletion is appropriate.
• Being transparent with individuals about what can and cannot be done.

Because the existence and scope of any erasure right depend heavily on the applicable law, this explainer does not state fixed entitlements. The specifics should be confirmed with current guidance, such as the OAIC for Australian matters.

Why it matters for debt recovery

Individuals sometimes ask a recovery provider to delete information about them. Handling such requests appropriately, including explaining where deletion is and is not possible, is part of treating people fairly and managing information responsibly.

For a prospective client, a provider's approach to deletion requests reveals whether it understands the balance between privacy and legitimate retention. A provider that either ignores requests or deletes records it is required to keep is mishandling the balance in different ways.

Our Trust Centre covers closely related topics including data retention and the right to access.

What to ask a provider

Useful questions include: How does the provider handle a request to delete personal information? Does it understand that deletion may be limited by legal or legitimate retention needs? And how does it securely dispose of information when deletion is appropriate?

Look for a balanced, informed approach rather than absolutes in either direction. A provider that can explain when it can and cannot delete information is demonstrating sound judgement.

How Merion approaches it

Merion follows the principle that personal information should not be kept indefinitely without reason and that individuals may, in some circumstances, ask for information to be deleted. We aim to weigh such requests against any legal or legitimate need to retain information, dispose of information securely where deletion is appropriate, and be transparent about what can and cannot be done.

This is general information only and not legal advice, and it asserts no certification. The existence and scope of any erasure right depend on the applicable law, so the OAIC and independent advice are the right sources for specifics.