Definition
The right to erasure, established under Article 17 of the GDPR and commonly known as the right to be forgotten, gives individuals the right to request the deletion of their personal data without undue delay. For email marketing, this means subscribers can request complete removal of their data from your systems.
The right to erasure is not absolute. It applies in specific circumstances and may be limited by other legal obligations.
When the Right to Erasure Applies
| Circumstance | Email Marketing Example |
|---|---|
| Data is no longer necessary for the purpose | Subscriber data is not needed after they unsubscribe |
| Consent is withdrawn | Subscriber withdraws consent for marketing |
| Objection to legitimate interest | Subscriber objects to legitimate interest processing |
| Unlawful processing | Data was collected without proper consent |
| Legal obligation to erase | Court order or regulatory requirement |
| Child consent | Data collected from a child (age < 13 in UK) |
When the Right to Erasure Does Not Apply
| Exception | Email Marketing Example |
|---|---|
| Legal obligation to retain | Transaction records must be kept for tax purposes |
| Establishment of legal claims | Evidence needed for dispute resolution |
| Public health reasons | Healthcare communications |
| Archiving in public interest | Historical research |
| Freedom of expression | Journalism, academic research |
Erasure Process for Email Marketing
| Step | Action | Notes |
|---|---|---|
| 1. Verify identity | Confirm the requester is the data subject | Prevent unauthorised deletion |
| 2. Assess grounds | Determine if erasure applies | Consider exceptions |
| 3. Erase from active systems | Remove from ESP, CRM, analytics | Most ESPs support permanent deletion |
| 4. Erase from backups | Delete from backup systems where feasible | May be on next backup cycle |
| 5. Notify third parties | Inform data processors who hold the data | ESP, analytics providers |
| 6. Confirm erasure | Respond to the requester confirming completion | Within one month |
Right to Erasure vs Unsubscribe
| Action | Effect | Regulatory Basis |
|---|---|---|
| Unsubscribe | Stops future emails, data retained | PECR/CAN-SPAM |
| Right to erasure | Complete data deletion | GDPR Article 17 |
Best Practices
- Distinguish unsubscribe from erasure: An unsubscribe request is not the same as a right to erasure request. Unsubscribing stops emails but retains data. Erasure deletes all data.
- Automate suppression list retention: You may need to keep a suppression list (email address only) after erasure to ensure you do not re-add the person in future.
- Document erasure requests: Maintain records of erasure requests and responses for compliance auditing.
- Process within one month: Same timeline as DSAR and data portability requests.
Related Glossary Terms
A/B Testing
A/B testing in email marketing is the practice of sending two variations of an email to a small sample of your list to determine which version performs better before sending the winner to the remaining subscribers.
Abandoned Cart Email
An abandoned cart email is an automated message sent to customers who added items to their online shopping cart but left without completing the purchase. It is one of the highest-converting email types in ecommerce.
AIDA Model for Email
The AIDA model (Attention, Interest, Desire, Action) is a classic copywriting framework used to structure email campaigns that guide subscribers from awareness to conversion.
AMP for Email
AMP for Email is a Google-developed framework that allows email messages to include interactive elements like forms, carousels, accordions, and live content. It turns static emails into dynamic, interactive experiences directly inside the inbox.
Anchoring Effect in Email Marketing
The anchoring effect is a cognitive bias where the first piece of information presented (the anchor) influences subsequent decisions, used in email to frame pricing and value perception.
Announcement Email
An announcement email is a dedicated campaign that communicates a specific update, milestone, or change to subscribers, from product launches and feature releases to company news and events.
Frequently Asked Questions
Unsubscribing stops future marketing emails but the subscribers data remains in your systems. Right to erasure requires complete deletion of all personal data. A subscriber who unsubscribes may still have their data retained for analytics. A subscriber who exercises right to erasure must have their data permanently deleted.
Yes. You can retain a minimal record (email address only) on a suppression list to ensure you do not inadvertently re-add the person after deletion. The ICO considers this a legitimate interest.
Within one month of receiving the request, with a possible two-month extension for complex requests. The same timeline applies to DSAR and data portability requests.
Inform the requester of the legal obligation that prevents erasure and the retention period required. Common examples include tax record retention and financial transaction records.
Yes, where feasible. ICO guidance suggests that data should be deleted from active systems promptly and from backup systems during the next backup cycle. If restoring a backup would reintroduce deleted data, the backup should also be erased.