47 Right to erasure or restriction of processing
47 Right to erasure or restriction of processing

(1)     The controller must erase personal data without undue delay where—

(a)     the processing of the personal data would infringe section 35, 36(1) to (3), 37, 38(1), 39(1), 40, 41 or 42, or

(b)     the controller has a legal obligation to erase the data.

(2)     Where the controller would be required to erase personal data under subsection (1) but the personal data must be maintained for the purposes of evidence, the controller must (instead of erasing the personal data) restrict its processing.