UK Data Protection Act 2018 s.47: Section 47 Right to erasure or restriction of processing

The controller must erase data without undue delay where processing would breach the principles, the consent rules or the sensitive processing safeguards, or where it is legally obliged to erase, whether or not the data subject asks; where the data must be kept as evidence it must restrict processing instead; and where accuracy is contested but cannot be established it must restrict processing.