Where the Concept Actually Started
The "right to be forgotten" traces to a 2014 European Court of Justice ruling involving a Spanish man who wanted outdated, no-longer-relevant financial information about him removed from Google search results. The court agreed, establishing a legal principle now embedded in the EU's GDPR: individuals have a right, under defined circumstances, to request that outdated, irrelevant, or excessive personal data about them be delisted from search results or deleted from a company's systems entirely, even if the underlying information is technically true and was legally published at the time.
What It Actually Covers - and What It Doesn't
This isn't an unlimited right to erase your digital footprint on demand. It applies most clearly to outdated or disproportionate information - a decades-old minor legal matter that no longer reflects who someone is, for instance - and is explicitly balanced against competing public interests like freedom of expression and the public's right to information. Search engines and data holders are required to weigh individual requests against those competing interests, meaning requests involving public figures, recent and relevant news, or matters of genuine public concern are far more likely to be denied than requests involving private individuals and genuinely outdated personal information.
Why Most of the World Doesn't Have This
The right to be forgotten remains largely a European legal concept. The United States has no equivalent federal right - free speech protections under the First Amendment, combined with a fundamentally different legal philosophy around information and publication, have made a broad "right to erasure" a much harder sell, and no comparable federal law has passed despite periodic proposals. A patchwork of state-level privacy laws, led by California's Consumer Privacy Act, offers narrower rights to request data deletion from specific companies, but nothing close to the EU's broader search-delisting framework. Most countries outside Europe and a small number of other jurisdictions have no meaningful equivalent at all.
The Practical Limits Even Where It Exists
Even in the EU, the right to be forgotten has real practical limits. A successful delisting request typically only removes a result from search engines within the EU - the underlying content usually remains published and accessible directly, or via search engines outside the EU's jurisdiction, meaning true "erasure" from the internet is rarely fully achievable even under the strongest existing legal framework. Data that has already been scraped, archived, or incorporated into AI training datasets before a deletion request is even harder to fully remove, since it may already exist in countless downstream copies the original source has no control over.
The New Complication: AI Training Data
The rise of large AI models has added a genuinely new dimension to this debate. If your personal writing, photos, or other data were used to train a commercial AI model, "forgetting" you isn't a simple deletion - it potentially requires retraining or fine-tuning the model itself, a technically difficult and expensive process that most AI companies have been reluctant to commit to on an individual basis. This is an active area of both litigation and policy debate, and unlike search engine delisting, there's no settled legal or technical framework yet for what a meaningful "right to be forgotten" looks like in the context of AI training data specifically.
What You Can Actually Do Today
If you're in the EU or a jurisdiction with similar protections, most major search engines and platforms have a formal request process for delisting or deletion - it's underused largely because awareness of the right remains low, not because the process is unusually difficult. Outside those jurisdictions, your practical options are narrower: requesting removal directly from the website hosting the content, using platform-specific privacy tools where available, and, for content on major platforms, invoking their own community or privacy policies, which sometimes offer protections beyond what local law strictly requires.
