Under GDPR, the data subject has the right to request erasure of personal data.