Right to Restriction of Processing – art.12, 18
A data subject has the right to block or suppress personal data being processed or used. This means that an individual can limit the way that an organisation uses their data. This is an alternative to requesting the erasure of their data.
Individuals have the right to restrict the processing of their personal data where they have a particular reason for wanting the restriction. This may be because they have issues with the content of the information you hold or how you have processed their data. In most cases you will not be required to restrict an individual’s personal data indefinitely, but will need to have the restriction in place for a certain period of time.
Implement a process and the technical capabilities to:
- track all data relating to requester in your systems,
- vet a right to restriction of processing request,
- pause processing without erasing the data, and
- confirm the restriction in processing to the requester.
