54It follows that even initially lawful processing of data may over time become incompatible with Regulation 2016/679 where those data are no longer necessary for such purposes (judgment of 24 September 2019, GC and Others (De-referencing of sensitive data), C‑136/17, EU:C:2019:773, paragraph 74) and that the data must be erased when those purposes have been served (see, to that effect, judgment of 7 May 2009, Rijkeboer, C‑553/07, EU:C:2009:293, paragraph 33).
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.