Right to Restrict Processing
Under the GDPR individuals have a right to restrict processing of personal data. Restrictions may be required:
- Where an individual contests the accuracy of the personal data, you should restrict the processing until you have verified the accuracy of the personal data.
- Where an individual has objected to the processing (where it was necessary for the performance of a public interest task or purpose of legitimate interests), and you are considering whether your organisation’s legitimate grounds override those of the individual.
- When processing is unlawful and the individual opposes erasure and requests restriction instead.
- If you no longer need the personal data but the individual requires the data to establish, exercise or defend a legal claim.
Where the individual's personal data has been disclosed to others, each recipient must be contacted and informed of the restrictions on the processing.
The University will publish here any additional guidance relevant to its activities as it becomes available.
Refer also to the ICO published guidance on the Right to Restrict Processing.