Legal Basis for the Right to Erasure
Article 17 of GDPR establishes the right to erasure when data is no longer necessary for its original purpose, consent is withdrawn, data was unlawfully processed, or there is no overriding legitimate interest. Similar rights exist under CCPA in California and emerging privacy laws in Brazil, India, and other jurisdictions.