With the development of technology, individual’s each online action will leave his/her data print. After professional processing and mining, those data will become a distinctive data chain to recognize and identify him/her successfully. According, new requirements for legal protection on internet privacy arise in the digital times. Based on the updated General Data Protection Regulation (GDPR) proposed by European Commission, the paper discusses one of the hot issues-right to be forgotten. By taking Google and Facebook as examples, from the aspects of theory, legislation, jurisdiction and tradition, the paper analyses the real meaning of the right, and furthermore, points out the right is also facing some new challenges, such as data collection, data control and application scope. Finally, after some comments on the right, the paper presents an idea that the right could not be realized totally if there are still some limits.