Skip to content

Restriction of Processing

What is Restriction of Processing?

The right of individuals to request that a controller limit the processing of their personal data under certain circumstances defined in privacy law.

Privacy and Data Protection

Each of these is named in at least one of the same controls as restriction of processing. The number is how many controls name both.

What the standards actually require on restriction of processing

Requirements naming restriction of processing across 6 standards, quoted from the control text.

GDPR2 controls

Restrict processing on request where the data subject contests the accuracy of the data, for a period enabling the controller to verify it; where the processing is unlawful and the data subject opposes erasure and asks for restriction instead;

GDPR-Art.18 · Right to restriction of processing →

The data subject may obtain restriction where accuracy is contested (while it is verified), processing is unlawful but they oppose erasure, the controller no longer needs the data but they need it for legal claims, or they have objected under Article 19(1) pen...

albania-law-no-124-2024-on-personal-data-protection::17 · Article 17: restriction of processing and the Commissioner's preliminary order →

Data subjects may obtain suspension of processing while the controller verifies accuracy they contest; where processing is unlawful and they prefer restriction to deletion; where the controller no longer needs the data but they need them for legal claims;

ley-org-nica-de-protecci-n-de-datos-personales-lopdp::19 · Art. 19: suspension (restriction) of processing →

The data subject may obtain restriction while accuracy is verified, where processing is unlawful and erasure is opposed, where the controller no longer needs the data but the data subject needs it for legal claims, or pending verification of an objection.

montenegro-law-on-personal-data-protection-2026::19 · Article 19: right to restriction of processing →
Rwanda DPL1 control

The data subject, or the supervisory authority, may restrict the controller's processing for a given period where the accuracy of the data is contested pending verification, where processing is unlawful and the data subject requests erasure or restriction of u...

rwanda-dpl::22 · Right to restriction of processing →

The controller must erase data without undue delay where processing would breach the principles, the consent rules or the sensitive processing safeguards, or where it is legally obliged to erase, whether or not the data subject asks;

uk-data-protection-act-2018::s.47 · Section 47 Right to erasure or restriction of processing →

Questions people ask about restriction of processing

What is Restriction of Processing?
The right of individuals to request that a controller limit the processing of their personal data under certain circumstances defined in privacy law.
Why is Restriction of Processing important for compliance?
Restriction of Processing is a key concept in Privacy and Data Protection. Understanding restriction of processing helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Restriction of Processing?
Restriction of Processing appears in the requirement text of GDPR, Albania Law No. 124/2024 on Personal Data Protection, Ecuador Ley Orgánica de Protección de Datos Personales (LOPDP), Montenegro Law on Personal Data Protection (2026), Rwanda DPL. Across these standards we have identified 7 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Restriction of Processing?
Explore our compliance framework pages to see how restriction of processing applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Restriction of Processing applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.