§ 54 DSG NRW
Rectification and erasure of personal data and restriction of processing
(1)The controller shall rectify personal data where they are inaccurate.
(2)The controller shall erase personal data without delay where their processing is unlawful, where they must be erased to comply with a legal obligation, or where knowledge of them is no longer necessary for the performance of his or her tasks.
(3)Section 50(3) to (5) shall apply accordingly. Where inaccurate personal data or personal data have been transmitted unlawfully, the recipient shall be notified thereof.
(4)Without prejudice to maximum storage or erasure periods laid down in legal provisions, the controller shall establish appropriate periods for the erasure of personal data or for a regular review of the necessity of their storage, and shall ensure by procedural safeguards that these periods are complied with.