Understanding Right to Restrict Processing

Overview

The right to restrict processing allows individuals to control how organisations use their data.

Conditions for Restricting Processing

• Alternative to Erasure: Individuals can choose to restrict processing instead of requesting data erasure.
• Limitation: Organisations can store data but cannot process it further without consent, except in specific circumstances.
• Notification: If data is shared with another organisation, they must be informed of the restriction.

Refusal of Restriction

If an organisation wishes to refuse to comply with a restriction request:

• Justification: The request must be proven to be manifestly unfounded or excessive, considering its repetitiveness.
• Reasonable Fee: A fee can be requested to process the request, or the request can be refused, with justification provided.

The relevant individual must be informed of the reasons for not taking action, allowing them to lodge a complaint with the ICO or another supervisory authority.