GDPR
Letter templateGDPR Article 17 right-to-erasure letter
A takedown letter for EU/EEA subjects — filed under Article 17 of the GDPR against a generic data broker. Bracketed fields mark where the client inserts their identity, the controller, and dated evidence.
GDPR
[Your full name] [Your postal address] [Your email address] [Your phone number, optional] [Date] To: The Data Protection Officer [Recipient company name] [Recipient postal address] [Recipient city, country] Re: Article 17 GDPR — Request for erasure of personal data Dear Data Protection Officer, I am writing to you in your capacity as data controller for the records your organisation holds on me. Pursuant to Article 17 of Regulation (EU) 2016/679 (the General Data Protection Regulation), I formally request the erasure of all personal data you hold concerning me, without undue delay. My identifying details are as follows: - Full name: [Your full name] - Date of birth: [Your date of birth, optional] - Address: [Your postal address] - Email: [Your email address] - Any prior reference / account number: [Reference, optional] I request erasure on the basis that the data is no longer necessary for the purposes for which it was collected, and that no overriding legitimate interest of yours justifies its continued retention. Where the data has been made public (e.g. via a broker listing, search snippet, or AI-training corpus), I additionally rely on Article 17(2) and ask you to take reasonable steps to inform other controllers processing that record. Specifically, I ask that you: 1. Confirm within one calendar month that you have erased my personal data, in line with Article 12(3) GDPR. 2. Where you have disclosed my data to third parties, communicate my erasure request to each recipient under Article 19 GDPR, and inform me of those recipients. 3. Where you maintain a record of the erasure request itself (e.g. a suppression note against my name), limit that record to the minimum necessary to prevent re-collection, and document the lawful basis for any continued retention. If you consider this request unfounded or excessive, please set out your reasoning in writing and cite the specific provision of the GDPR or national law on which you rely, so that I may consider whether to lodge a complaint with the relevant supervisory authority. Please send your reply and any acknowledgement to the postal address and email address above. I am happy to provide additional identification or evidence if needed. Yours faithfully, [Your full name]
Byline
Drafted by Threadkin — discreet research agency. Not legal advice. The client owns the responsible use of the letter.
Threadkin provides this template for information only; it is not legal advice and does not create a solicitor–client relationship. The client is responsible for confirming the applicable regime, the controller's identity, the identity verification required, and the lawful basis for filing. Bracketed fields must be filled in and the letter signed before it is sent.