Which right allows data subjects to request that their data be deleted?

The right that enables data subjects to request the deletion of their personal data is known as the "right to erasure." This right is integral to the General Data Protection Regulation (GDPR) and is often referred to colloquially as the "right to be forgotten."

Under this right, individuals have the ability to request the deletion of their personal data when it is no longer necessary for the purposes for which it was collected, when they withdraw consent upon which the processing is based, or when they believe their data has been unlawfully processed. The right to erasure encompasses situations where the data subject contests the accuracy of the data, rendering it impermissible to retain the information without justification.

The other options represent different rights under the GDPR. The right to access allows individuals to obtain confirmation of whether their personal data is being processed and to access that data, while the right to object permits them to oppose processing for certain purposes, such as direct marketing. The right to restriction allows individuals to request a temporary halt to the processing of their personal data under specific circumstances. Each of these rights serves a unique purpose in the data protection framework, with the right to erasure specifically focused on data deletion.