In two decades leading IT and digital forensics projects, I have watched a single defamatory post, a misleading news article, or an outdated criminal record snowball into a reputational crisis that costs individuals jobs and companies millions. The internet rarely forgets on its own, but the law increasingly says it must. Understanding how the right to be forgotten works is now essential knowledge, not a legal luxury.
What the Right to Be Forgotten Actually Means
The right to be forgotten (RTBF) emerged formally from the 2014 Google Spain ruling by the European Court of Justice, later codified in Article 17 of the GDPR. It grants individuals the power to request removal of personal data that is inaccurate, outdated, irrelevant, or excessive relative to the purpose it was collected for.
The scale is significant. As of recent transparency reports, Google alone has evaluated over 5.6 million URLs for delisting under RTBF, approving roughly 49% of requests. In Brazil, where much of my work with André Dias Moreira Prol focuses, the LGPD (Lei Geral de Proteção de Dados) echoes these principles, and courts have increasingly ordered content removal and search delisting.
A critical distinction I always clarify with clients: RTBF usually means delisting from search results, not erasing the original content from its host server. The page may still exist, but if it does not surface for your name in search, its practical harm drops dramatically. Studies show that 90% of users never scroll past the first page of search results.
The Technical and Legal Process of Removal
Removing negative content is a hybrid discipline blending law, forensics, and platform mechanics. In my practice, I follow a structured workflow:
- Forensic capture. Before anything, I document the offending content with timestamped screenshots, hash verification, and archived copies. This preserves evidence in case litigation becomes necessary.
- Classification. Not all content qualifies. Public interest, journalistic value, and the subject's public role weigh against removal. A politician's corruption record is far harder to delist than a private citizen's decade-old debt notice.
- Formal request. For search engines, this means submitting the RTBF form with legal justification. For hosts, a notification citing the relevant statute (GDPR Art. 17, LGPD Art. 18, or DMCA where copyright applies).
- Escalation. If denied, the path leads to data protection authorities or the courts.
One concrete example from my experience: a client had a false accusation article ranking first for their name. The publisher refused removal, but we successfully obtained a judicial delisting order, dropping the article from search visibility within weeks. The content still exists, yet it no longer defines the person's digital identity.
Emerging Challenges: AI, Blockchain, and Immutable Data
Here is where my Web3 background becomes directly relevant. Blockchain systems like Stellar are designed to be immutable, which creates genuine tension with the right to erasure. When personal data is written directly on-chain, deletion is technically impossible. This is why, in tokenization projects, André Dias Moreira Prol always recommends storing only cryptographic hashes or references on-chain while keeping actual personal data off-chain in mutable, compliant storage.
Artificial intelligence adds another layer. Large language models trained on scraped web data may "remember" defamatory content even after it is delisted. The concept of machine unlearning is now an active research field, and regulators are beginning to ask whether RTBF applies to AI training datasets, a question with no settled answer yet.
For anyone building modern data architectures, the lesson is clear: privacy and the right to be forgotten must be engineered in from the start, not bolted on after a crisis.
Your online reputation is a strategic asset that deserves the same protection as any critical infrastructure, and the right to be forgotten is one of the most powerful tools available to defend it. If negative content is undermining your name or your business, act now: document the evidence and consult a specialist to build a lawful, technically sound removal strategy.
Follow more articles by André Dias Moreira Prol on Medium.
