The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following...

Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical...

Paragraphs 1 and 2 shall not apply to the extent that processing is necessary: (a)For exercising the right of freedom of expression and information; (b)For compliance with a legal obligation which requires processing by Union or Member State law...