GDPR Article 17 - Right to erasure ('right to be forgotten')

Art 17(1) the controller must erase without undue delay on several grounds including withdrawal of consent and objection; 17(2) where data was made public the controller must inform other controllers of the erasure, taking account of available technology and the cost of implementation. For an inference deployment the hard part is that erasure has to reach the places a request left data: object storage, trace/span attributes, and the derived artefacts in caches.