Art.18 Right to restriction of processing

Restrict processing on request where the data subject contests the accuracy of the data, for a period enabling the controller to verify it; where the processing is unlawful and the data subject opposes erasure and asks for restriction instead; where the controller no longer needs the data but the data subject requires it for the establishment, exercise or defence of legal claims; and where the data subject has objected under Article 21(1), pending verification of whether the controller's legitimate grounds override theirs. Restricted data may be stored but otherwise processed only with the data subject's consent, for legal claims, for the protection of another person's rights, or for reasons of important public interest. Inform the data subject before a restriction is lifted.

Source: GDPR, Art.18. The statement above is our statement of the clause, read from the published text and cited so you can check it against the official text, not the instrument verbatim. Open GDPR in the compliance library.

Many articles apply only where their condition is met (a data protection officer under Article 37, an impact assessment under Article 35, a representative under Article 27); the condition is in each statement.