Privacy · Online safety · French law

Tracking removal and de-indexing requests

Organise evidence, follow up requests and consider appeals.

Practical guidance · 04

Prepare and track a request

A simple method to organise reports, avoid omissions and follow up with websites and search engines.

Before submitting

Build a clear case file

Step 1

Identify the source and search results

Record the original page address, search-result URLs, the search engine and the queries that reveal the content. A page URL and an image URL may be different.

Step 2

Preserve evidence

Take readable screenshots with dates, keep URLs and save correspondence. Do not alter original evidence or republish exposed information.

Step 3

Contact the source website

Where possible, ask the publisher or host to remove the content or make it inaccessible. The CNIL recommends contacting the relevant website to exercise your rights. A de-indexing request may be made in parallel.

Step 4

Submit a separate request to each search engine

Use the form matching your reason: right to de-index, doxxing policy, personal content, legal grounds or outdated result. An incomplete or overly broad request may delay review.

Step 5

Track deadlines and follow up

Record the submission date, case number, URLs and response. For GDPR data-rights requests, the organisation should generally respond within one month. This period may be extended by two further months for complex or numerous requests, provided the person is informed within the first month.

Step 6

If the request is refused or unanswered

Ask for the reasons and check whether your request was sufficiently precise. Where appropriate, you may lodge a complaint with the CNIL, including your original request and any response. The CNIL can provide guidance about the competent authority for a search engine established in another EU country.

Suggested tracking table

ItemWhat to record
Source URLExact address of the page hosting the content
Search engine / result URLGoogle, Bing, Qwant, etc. and the displayed link
GroundsGDPR, doxxing policy, platform rule, illegal content or outdated result
Submission dateDate, time and method used
ReferenceCase number or acknowledgement
Follow-up dateNext date to check, based on the applicable process
DecisionAccepted, refused, partial or pending
GDPR deadline: the one-month period applies to data-rights requests sent to a data controller. It is not a guaranteed identical deadline for every report made under a search engine's internal policies.

Official sources