Leave No Data Behind – Empirical Insights into Data Erasure from Online Services

Privacy regulations such as the General Data Protection Regulation (GDPR) of European Union promise to empower users online services and strengthen competition in markets. Its Article 17, Right Erasure (Right be Forgotten), is part a set user rights that aim give more control over their data by allowing them switch between easily delete from old service. In our study, we investigated deletion practices sample 90 services. twostage process, first request erasure analyze what extent public (e.g., posts on social network) remains accessible non-anonymized format. More than six months later, information using Access requests under Art. 15 GDPR find out if remains. Our results show majority perform erasures without observable breaches provisions 17 GDPR. At 27%, share non-compliant not negligible; particular, observe differences submitted dedicated button formal