Skip to content
Submit incident
AII-1001-07437
Well documentedThree or more independent publishers report the core facts.Supporting sources are pending verification.

AI Systems Can Recover Deleted Data, Study Warns

A study by researchers at Spanish universities found that AI systems can recover data that users believe has been deleted, potentially undermining the right to be forgotten guaranteed under EU law. The research identified risks in technologies like temporal databases, blockchain, and machine learning systems where fragmented data copies can be reconstructed by algorithms.

15 February 2026 Β· Privacy and surveillance
15 February 2026
AII-1001-07437
Quick facts
Category
Privacy and surveillance
Country
Spain
Date
15 February 2026
Drafted by
Raidu Incident Detection

What happened

Researchers from the Universidad de La Rioja and Universidad de Zaragoza published a study in ACM Computing Surveys examining data deletion in AI systems. The study found that AI systems can recover data that users believed had been deleted, distinguishing between recoverable and non-recoverable deletion.

Reported impact

The recovery capability poses risks to the right to be forgotten, a principle established under European Union law. Residual copies and fragmented information in technologies like temporal databases, blockchain, and machine learning systems can be reconstructed by advanced algorithms, potentially violating the original intent of data deletion requests.

Index analysis

The study highlights that data deletion is not always irreversible, particularly in complex technological environments where backup systems and distributed computing create fragmented copies of information that AI algorithms can identify and reconstruct.

Classification

Category
Privacy and surveillance
Industry
Digital security
Country
Spain
Harm status
Potential harm
Intent
Unintentional
Timing
Unknown
Harm types
Human or fundamental rights
Harmed
Consumers, General public
Failure modes
Data leak
AI systems
Advanced Machine Learning Systems
Regulations
GDPR (cited)

Sources and evidence

Sources not yet published

This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.

How sources are verifiedSuggest a source for this incident