Hello, I wrote a mail template which I send to websites that don’t have an easy process of deleting an account.
Maybe it helps you, maybe you will use it too for when you want to delete your unused accounts and maybe you can contribute to it. The better the message gets and the more websites offer an easy way to delete accounts, the safer we’ll be online.
If you can influence the deletion policy, please read on. Otherwise, please forward this to someone that can influence this process.
It’s better for the business to offer an easy way to delete an account. Ideally, it would be good to delete accounts which weren’t active for more than say 5 years, with a mail notification beforehand. Why? Here are the main reasons:
- There are higher operation and maintenance costs because you have unused accounts in your databases.
- The services load slower, with a performance penalty, because each user-related query has to go through many unused users.
- The people opinion of your services decreases, because you don’t offer an easy way to delete accounts
- People might change their mail to a throw-away address and leave the account open, thus producing more waste than necessary.
- In case of a security breach, the amount of compromised data is higher than in case you regularly delete accounts, which might lead to financial penalties.
- The information you get out of a database with active accounts is much more precious than the information from a stale database, or one with obsolete data.
I hope this information helps and that you will change your policy of deleting accounts. Each website that does this, contributes to a better, safer ecosystem.
I usually just write
Hi,
Please delete my account and all data associated with this email in accordance with Article 17 of GDPR, I’m an EU citizen
Thanks x
I just assume if they haven’t made it easy to delete your account by now then they never will but these are really good points that will hopefully make companies change their policies, especially since its all things that benefit them
I spend too much time reading emails so I try to keep mine short, especially when they’re going to a generic email like support or privacy.
https://gdpr.eu/right-to-be-forgotten/
The GDPR does not specify what a valid request to erasure entails. An individual can make a request for erasure verbally or in writing. This request can also be made to any member of your organization, not just to a designated contact. As long as a request meets the conditions above, it is valid, even if it does not refer to “Request for Erasure” the “Right to be Forgotten,” Article 17, or the GDPR.
There’s no template to follow for a request. Once GDPR is mentioned, they usually just email back saying that they’re doing it or its done.
I haven’t come across any difficult companies but I’ve heard some make it as hard as possible and follow the Erasure Request form template in the link above and ask for proof of I.D etc
It’s easy to say “Del my account per Article 17 GDPR”. I wrote this whole template so that other might have an easier time than I do. I posted the template here so it inspires other privacy-aware individuals to do the same. If 1 website changes their account deletion policy because of it, it’s still a win.
No, because by processing EU personally identifiable information a non EU company becomes a data controller / processor as defined by GDPR and has to comply with its requirements including data subject rights, such as the right to access, rectification or deletion.
Well, they can still tell you to kick rocks obviously, in which case you could report this to your EU regulator as empowered by the GDPR. If a regulator decides action is necessary this would follow the sanctions as set out in GDPR (maximum of 10 million or 4% gross worldwide annual turnover).
So say a local Australian software company tells you to get fkd. What can the EU regulator do?
Why this ensures the account is deleted, I wanted to convince the company to improve their policy so that other people will have an easier time to delete their accounts, should they wish this. That is also why I wasn’t talking “legal” and mentioned the company benefits from this.
you can’t convince companies that are profit driven. They follow whatever is the best decision for profit, which is clearly not letting you delete your account because they would’ve done that earlier if it led to profit. This assumes full efficiency on the side of the company but if they are large enough, that means that they are efficient enough to beat the competition already.
A company will never do anything that is not increasing their profit. If the profit of breaking law is greater than the fine then they will do it.
What they will do, is create a button called “delete account” which will just block you from logging in. It will not delete your content. Sending an email which clearly says they’re getting sued is probably the easiest option. You gotta speak their language.
I hate to tell you this but, they don’t care. If they haven’t implemented an easy way for you to request deletion, it’s because they don’t want you to have it.
