This paper examines how the right to be forgotten is balanced with freedom of expression for spent criminal convictions in the EU. It discusses how people with criminal records that are now reformed still have their records available online, which can negatively impact employment, insurance, education and social opportunities. The paper aims to determine if the current balancing of these two rights is properly done. It will analyze the existing balancing practices derived from the Google Spain ruling, different approaches taken, and findings on the current "grey zone" of balancing and tensions between the GDPR and ECJ practices. The conclusion is that balancing of these two rights is still in its early stages and more tangible norms are needed to advance it to the next generation.