Privacy Protection

The Right to Be Forgotten: Removing Personal Information Online

8 min read

Your past lives permanently on the internet. Old social media posts, news articles, public records, and data broker profiles create a digital footprint that follows you for years or decades. An embarrassing photo from college, an arrest that didn't lead to conviction, outdated information about where you live and work - all of this remains searchable long after its relevance has faded.

The "right to be forgotten" refers to the ability to have personal information removed from search results and deleted from databases. While this right is stronger in Europe than in the United States, you have more control over your digital presence than you might think. Removing information completely is difficult, but reducing its visibility is often achievable through the right processes.

Understanding the Right to Be Forgotten

The European Union's General Data Protection Regulation (GDPR) grants individuals the right to request deletion of their personal data under certain conditions. This applies to European Union residents and affects how global companies handle data removal requests from EU citizens.

In the United States, no federal right to be forgotten exists. Some states, including California with its Consumer Privacy Act, provide limited data deletion rights. However, most Americans rely on voluntary compliance from websites and platforms rather than legal requirements.

The First Amendment protects truthful information, particularly news coverage and public records. You generally can't force removal of accurate news articles or legitimate public information. Your right to privacy must balance against freedom of speech and the public's right to information.

Google Search Removal Requests

Removing content from Google search results is often more practical than removing it from the original website. If something doesn't appear in search results, most people won't find it.

European Right to Be Forgotten Requests

If you're an EU resident, you can request removal of search results that are "inadequate, irrelevant, or no longer relevant." Visit Google's removal request form and provide the URLs you want removed along with an explanation of why they meet the criteria.

Google reviews each request individually and balances your privacy rights against public interest. Removal is more likely for old information about private individuals and less likely for information about public figures or matters of public concern. Approved removals only apply to European versions of Google, not Google.com.

U.S. Removal Requests

Americans have fewer guaranteed rights, but Google does remove certain content from search results based on its own policies. You can request removal of specific content types including doxxing content that includes personal contact information, non-consensual intimate images, financial information like bank account numbers, and certain images of minors.

Visit support.google.com/websearch/answer/6302812 to see removal options and submit requests. For each category, you'll need to provide URLs, explain why the content meets removal criteria, and sometimes provide identification verification.

Outdated Content Removal

If you successfully removed content from a website but it still appears in Google search results, use the Remove Outdated Content tool at search.google.com/search-console/remove-outdated-content. This tells Google to update its index to reflect that the original page no longer exists or has changed.

Social Media Account Deletion

Deleting social media accounts removes your profile and posts, though the process and thoroughness vary by platform.

Facebook

Facebook distinguishes between deactivation (temporary) and deletion (permanent). To delete permanently, go to Settings, select "Your Facebook Information," click "Deactivation and Deletion," choose "Delete Account," and confirm. Facebook gives you 30 days to cancel before permanent deletion begins. The process takes up to 90 days to complete, and some information may remain in backups.

Instagram

Instagram deletion must be done through a web browser, not the app. Visit instagram.com/accounts/remove/request/permanent, select a reason for deletion, re-enter your password, and confirm. Like Facebook, there's a waiting period before permanent deletion, during which you can cancel.

Twitter/X

Deactivate your account through Settings, "Your Account," "Deactivate your account." Twitter keeps your account in deactivated state for 30 days before permanent deletion. During this period, you can log in to reactivate. After 30 days, your username becomes available for others to claim.

LinkedIn

Go to Settings & Privacy, Account preferences, "Account management," "Close account." LinkedIn provides options to download your data first. Once closed, some information may remain visible in messages sent to other users or in LinkedIn's backups for a limited time.

Requesting Removal from Websites

When your personal information appears on websites you don't control, you can request removal, though success isn't guaranteed.

Contacting Website Owners

Start by identifying the website owner. Check the site's Contact or About page for contact information. Send a polite, clear request explaining what content you want removed and why. Include specific URLs to make the request easier to fulfill.

Be reasonable in your request. Website owners are more likely to comply with legitimate privacy concerns than attempts to erase truthful but unflattering information. Explain the harm caused by the content and, if applicable, note that it's outdated or inaccurate.

When Websites Refuse

If a website refuses removal, consider whether the content violates their terms of service or community guidelines. Many platforms remove content that violates their own rules even if it doesn't violate law. File a report through the platform's abuse or content reporting system.

For defamatory content (false statements that harm your reputation), you may have legal recourse. Consult an attorney about sending a cease and desist letter or pursuing legal action. However, this can be expensive and isn't guaranteed to succeed.

People Search Site Opt-Outs

People search sites like Spokeo, BeenVerified, and Whitepages aggregate public information about you and make it easily searchable. Each site has its own opt-out process, typically buried deep in their privacy policies.

General Opt-Out Process

Search for your name on the people search site to find your profile. Take note of the profile URL or ID number. Look for "Privacy," "Opt Out," or "Do Not Sell My Info" links, usually in the website footer. Submit the opt-out form with your information and profile details.

Expect this to take 24-72 hours for most sites. Some require email verification or even mailing a physical letter. Keep records of your opt-out requests and check back after a few weeks to ensure removal succeeded.

New people search sites emerge regularly, and information can reappear over time. Set a calendar reminder to repeat this process every few months for major sites.

Managing Public Records

Government records including property ownership, voter registration, court records, and professional licenses are public by law and generally can't be removed from official sources. However, you have some options.

Address Privacy Programs

Some states offer address confidentiality programs for victims of domestic violence, stalking, or other threats. Participants receive a substitute address for public records, keeping their actual residence private. Check with your state government for eligibility and enrollment processes.

Limiting Future Exposure

When possible, use a P.O. box or business address instead of your home address on public documents. For voter registration, some states allow you to opt out of having your information sold to commercial entities, though your registration remains in public records.

Consider using a trust or LLC to purchase property, keeping your personal name off property records. This requires legal assistance but provides significant privacy benefits for high-value assets.

Platform-Specific Deletion Tools

Many platforms offer tools to download or delete your data beyond just closing accounts.

Google Takeout

Before deleting Google services, use Google Takeout at takeout.google.com to download your data. This creates archives of your Gmail, photos, Drive files, and other Google data. After downloading, you can delete individual services or your entire Google account through account settings.

Facebook Download Your Information

Download your Facebook data before deletion through Settings, "Your Facebook Information," "Download Your Information." This includes posts, photos, messages, and data Facebook collected about you. The download can take hours or days depending on how much content you have.

Request Your Data Under Privacy Laws

California residents can request disclosure of what personal information companies have collected about them under the CCPA. This helps you understand what exists before requesting deletion. Other states with privacy laws offer similar rights.

The Limitations of Deletion

Complete removal of information from the internet is nearly impossible. Once information spreads across multiple websites, archives, and databases, eliminating every copy requires tremendous effort with no guarantee of success.

The Internet Archive's Wayback Machine preserves historical snapshots of websites. While you can request removal of pages you control, copies on the Wayback Machine may persist. Other archiving services and cached copies on search engines create additional permanent records.

Information shared with third parties often can't be recalled. If a website sold your data to data brokers before you requested deletion, those brokers may claim they're not required to delete information they obtained legally before your request.

Prevention: The Best Strategy

Removing information after it's public is always harder than preventing publication in the first place. Think carefully before posting personal information online. Use privacy settings to limit who can see content. Consider whether something might be embarrassing or problematic years from now.

Regularly review your digital footprint by searching for your name. Set up Google Alerts for your name to be notified when new content appears. Address privacy issues quickly before they spread and become harder to remove.

Use different names or handles for different online activities to prevent easy linking of all your accounts. This compartmentalization limits how much someone can learn about you from searching a single name.

Setting Realistic Expectations

You can significantly reduce your online visibility, but you can't completely erase your digital footprint. Focus on removing the most sensitive or harmful information first. Accept that some content, particularly truthful news coverage and public records, likely can't be removed.

Measure success by reduced visibility rather than complete deletion. If damaging content no longer appears on the first few pages of Google search results, most people won't find it. That practical obscurity often provides adequate privacy protection even if technical deletion isn't possible.

Start Your Digital Cleanup

This week, Google yourself and review the first three pages of results. Identify any information you'd like removed and make a list. Next week, start with the easiest removals - deactivate unused social media accounts and submit opt-out requests to major people search sites. Within a month, you'll have substantially cleaned up your digital footprint.

Get Privacy Tips Delivered

Stay updated on privacy best practices and new ways to protect your data.