Key Takeaways
- •A deletion request does not guarantee removal of every record or destruction of a model.
- •Choose laws independently after checking their coverage.
- •Confirm authority before requesting deletion for another person.
- •Use only necessary identifiers and secure verification channels.
- •EU and UK response rules are different.
- •A generated letter is not a submitted request or a DROP filing.
Reviewed for accuracy by the document.com legal team. Educational information, not legal advice.
What Is AI Data Deletion Request?
A written request identifies the personal data you want a provider to delete and the reasons supporting that request.
It can address account records, conversations, uploads, training data and model-related information where those are personal data within the applicable right.
A voluntary request is available even when you do not invoke a particular statute. The provider’s legal duty depends on actual coverage and exceptions.
Why This Matters Now
AI data can exist across several systems; a precise request helps the recipient assess its scope.
California and UK rules have changed, so an old universal deadline can mislead.
Unsupported legal claims or excessive identity details can make a request less useful.
The Legal Backbone
California coverage
The CCPA deletion right has coverage and exceptions. SB 923 expands it from information collected from the consumer to information collected about the consumer from January 1, 2027.
EU and UK erasure
Article 17 has grounds and exceptions. The UK’s amended Article 12A sets a different timing framework; do not assume every EU rule carries over unchanged.
AI model assessment
AB 1008 does not expressly name model weights or tokens. EDPB Opinion 28/2024 addresses case-specific anonymity and assessment of unlearning techniques.
Children and representatives
Confirm the requester’s authority and the relevant law. COPPA parental rights concern covered online services involving children under 13, not every record about every minor.
Separate DROP process
DROP concerns registered California data brokers. The ordinary processing cycle changes from 45 to 30 days on January 1, 2027 under AB 883. A direct letter does not file through DROP.
Prepare a request that fits the facts
Identify the provider, service and designated privacy channel.
Supply necessary identifiers without passwords or identity-document copies.
Describe the data and distinguish known facts from suspected uses.
Choose supported grounds and ask for a reasoned response.
Review, sign, send through the proper channel and retain receipt evidence.
When You Need This
When asking an AI service to delete personal data.
When addressing personal data that may have entered training or model-related systems.
When acting with confirmed authority for a child or another individual.
When preparing a direct request alongside a separate DROP submission.
How to Fill Out AI Data Deletion Request
1. Find the right recipient
Use the designated privacy contact or portal and identify the service.
2. Confirm identity and authority
Use relevant identifiers and confirm any representative role.
3. Describe the request
Identify data, supporting facts and appropriate legal grounds.
4. Check the letter
Remove unsupported assertions and review any account consequences.
5. Deliver and track
Send it yourself and retain the actual receipt. Generation does not start a response clock.
Key Terms Defined
- Controller
- The organization responsible for the purposes and means of processing under the relevant privacy law.
- Personal data
- Information within the applicable law’s definition; not every model parameter qualifies automatically.
- Erasure ground
- A factual and legal reason supporting deletion under a particular rule.
- Internal appeal
- A review route required by some laws; distinct from a complaint to a regulator.
Related Documents
Training opt-out
Addresses specified future uses. It does not by itself answer a request about data already held.
Account cancellation
A separate service or billing action. This letter does not automatically cancel subscriptions.
DROP submission
A separate California platform request to registered brokers. The letter can describe an actual submission but cannot create one.
Legal Authorities & Sources
This page is grounded in primary law. The statutes and official resources below are the authorities behind the guidance above. Verify the current text of any statute before relying on it.
- California AB 1008 enacted text
- California CCPA regulations effective 2026
- California Attorney General deletion guidance
- CalPrivacy SB 923 coverage expansion
- EDPB individual rights guide
- AEPD erasure grounds and exceptions
- EU GDPR Articles 17 and 19
- UK Data Use and Access Act section 76, effective February 5 2026
- ICO erasure guidance, under review for DUAA
- EDPB Opinion 28/2024
- COPPA final rule including sections 312.6 and 312.10
- DROP processing cycles and AB 883 update
Frequently Asked Questions
Create your AI Data Deletion Request in minutes.
Answer a few questions and download a clear, attorney-drafted document that cites the controlling law and is ready to sign.