The right to erasure — also called the right to be forgotten — is a GDPR right under Article 17 allowing individuals to request deletion of their personal data. It applies when data is no longer needed for its original purpose, when the data subject withdraws consent and no other lawful basis exists, when they object to processing with no overriding grounds, or when data was unlawfully processed. Organizations must respond within one month. The right is not absolute — it does not cover processing needed for legal claims or public interest. Withdrawal of cookie consent is a common trigger for erasure requests.