This answer is one of the situations when a data subject would have the right to require the erasure of his or her data without undue delay under the General Data Protection Regulation (GDPR), which is also known as the right to be forgotten or the right to erasure. This right allows a data subject to request that a data controller deletes his or her personal data when one of the following grounds applies:
The data is no longer necessary for its original purpose.
The data subject withdraws his or her consent for processing.
The data subject objects to processing based on legitimate interests or direct marketing.
The processing is unlawful or violates other laws or regulations.
The processing is related to online services offered to children.