MR JUSTICE WARBY
Approved Judgment
NT1 & NT2 v Google LLC
shall have the obligation to erase personal data without
undue delay where one of the following grounds
applies:
(a)
the personal data are no longer necessary in
relation to the purposes for which they were
collected or otherwise processed;
(b)
the data subject withdraws consent on which the
processing is based according to point (a) of
Article 6(1), or point (a) of Article 9(2), and
where there is no other legal ground for the
processing;
(c)
the data subject objects to the processing
pursuant to Article 21(1) and there are no
overriding legitimate grounds for the processing,
or the data subject objects to the processing
pursuant to Article 21(2);
(d)
the personal
processed;
(e)
the personal data have to be erased for
compliance with a legal obligation in Union or
Member State law to which the controller is
subject;
(f)
the personal data have been collected in relation
to the offer of information society services
referred to in Article 8(1).
data
have
been
unlawfully
2.
Where the controller has made the personal data public
and is obliged pursuant to paragraph 1 to erase the
personal data, the controller, taking account of
available technology and the cost of implementation,
shall take reasonable steps, including technical
measures, to inform controllers which are processing
the personal data that the data subject has requested the
erasure by such controllers of any links to, or copy or
replication of, those personal data.
3.
Paragraphs 1 and 2 shall not apply to the extent that
processing is necessary:
(a)
for exercising the right of freedom of expression
and information;
(b)
for compliance with a legal obligation which
requires processing by Union or Member State
law to which the controller is subject or for the