Abstract: A method or system of providing data privacy compliance at a server with respect to a right to be forgotten can include one or more processors configured for receiving key information, data, and an expiration date in response to a request to create a key by a data subject to a key management service, sending a request to and receiving a key from the key management system, encrypting the data at the server with the key to provide encrypted data, storing the encrypted data in a storage, receiving a request to access the data, attempting to retrieve the key by the server, and denying access to the data in response to the request after a request from the data subject to revoke the key. In some embodiments, the key information received by the server is Hold Your Own Key and the encryption of data is Hold Your Own Encryption.