DENIED DataCore Solutions — GDPR Erasure Refused

A data broker holds your full profile — address, income estimate, employer, relationship status. You never gave them your data directly. You submitted a formal erasure request. DataCore's bot replied: "Legitimate interests basis under Article 6(1)(f). Publicly sourced data. No compelling grounds demonstrated."

The Situation

Data brokers compile profiles from public records and sell access to them. When you request deletion, they cite "legitimate interests" as if it automatically overrides your rights. It does not — especially when they have no direct relationship with you.

Key Law

• GDPR Article 17 — Right to Erasure — you can request deletion when there is no overriding legitimate purpose for processing. "Publicly available" is not an automatic defence. Art. 17
• GDPR Article 21 — Right to Object — for legitimate interest processing, you can object and the controller must demonstrate compelling grounds — not just assert them. Art. 21
• No direct relationship — without a contract or consent, the broker's legitimate interest claim is inherently weaker.

Arguments That Work

1. Invoke Article 21 — object to processing and demand they demonstrate compelling overriding grounds.
2. Challenge "publicly sourced" — public availability does not extinguish your erasure rights.
3. Ask for the specific compelling grounds in writing — vague assertions fail the legal test.
4. Threaten DPA complaint — data protection authorities actively pursue data broker violations.

About This Case

Related Guides

• GDPR Right to Erasure Refused: What You Can Do
• GDPR Subject Access Request: How to File a DSAR
• 🇪🇺 EU Consumer Rights — Full Guide
• All Fix AI Cases