GDPR Article 17
In the UK, this is summarised by Article 17 of the General Data Protection Regulation, or GDPR.
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.
In practice, this legislation has many applications, from removing information from company databases to deleting data that has been submitted to companies by minors. But at its core, the Right to be Forgotten is about taking ownership of the way that your personal information is used — and that includes damaging content online.