Skip to content

Right to Restriction

What is Right to Restriction?

The data subject's right to limit how an organization processes their personal data under specified circumstances while the data is retained.

Privacy and Data Protection

Each of these is named in at least one of the same controls as right to restriction. The number is how many controls name both.

What the standards actually require on right to restriction

Requirements naming right to restriction across 6 standards, quoted from the control text.

GDPR1 control

Restrict processing on request where the data subject contests the accuracy of the data, for a period enabling the controller to verify it; where the processing is unlawful and the data subject opposes erasure and asks for restriction instead;

GDPR-Art.18 · Right to restriction of processing →

The data subject may obtain restriction while accuracy is verified, where processing is unlawful and erasure is opposed, where the controller no longer needs the data but the data subject needs it for legal claims, or pending verification of an objection.

montenegro-law-on-personal-data-protection-2026::19 · Article 19: right to restriction of processing →
PDPA Thailand1 control

The data subject may ask the controller to restrict use of the data (1) while the controller examines a section 36 request; (2) where data due for erasure under section 33(4) is instead restricted at the data subject's request;

pdpa-thailand::S34 · Section 34 Right to restriction of use →
Rwanda DPL1 control

The data subject, or the supervisory authority, may restrict the controller's processing for a given period where the accuracy of the data is contested pending verification, where processing is unlawful and the data subject requests erasure or restriction of u...

rwanda-dpl::22 · Right to restriction of processing →

The data subject may have processing restricted while accuracy is contested, where processing is unlawful but they prefer restriction to erasure, where the controller no longer needs the data but the data subject needs them for legal claims, or pending verific...

uk-gdpr-uk-general-data-protection-regulation::Art.18 · Article 18 Right to restriction of processing →

Chapter II Sections 14-23 establish data subject rights and transparency obligations. Section 14 (Right to Information) requires controller to provide privacy notice at or before collection covering: identity + contact of controller + processor + DPO + purpose...

HU-INFOTV-Chap2-Transparency-DataSubject-Rights-Sections-14-23 · HU Infotv Chap II - Transparency + Data Subject Rights to Information, Access, Rectification, Erasure, Restriction (Sections 14-23) →

Questions people ask about right to restriction

What is Right to Restriction?
The data subject's right to limit how an organization processes their personal data under specified circumstances while the data is retained.
Why is Right to Restriction important for compliance?
Right to Restriction is a key concept in Privacy and Data Protection. Understanding right to restriction helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Right to Restriction?
Right to Restriction appears in the requirement text of GDPR, Montenegro Law on Personal Data Protection (2026), PDPA Thailand, Rwanda DPL, UK GDPR (UK General Data Protection Regulation). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Right to Restriction?
Explore our compliance framework pages to see how right to restriction applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Right to Restriction applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.