Skip to content

Right to Restriction

What is Right to Restriction?

The data subject's right to limit how an organization processes their personal data under specified circumstances while the data is retained.

Privacy and Data Protection

Each of these is named in at least one of the same controls as right to restriction. The number is how many controls name both.

What the standards actually require on right to restriction

Requirements naming right to restriction across 6 standards, quoted from the control text.

GDPR1 control

Restrict processing on request where the data subject contests the accuracy of the data, for a period enabling the controller to verify it; where the processing is unlawful and the data subject opposes erasure and asks for restriction instead;

GDPR-Art.18 · Right to restriction of processing
PDPA Thailand1 control

Data subjects may request restriction of processing pending accuracy verification, unlawful processing claims, or pending objection decisions.

Section 34 · Right to Restriction of Processing

Chapter II Sections 14-23 establish data subject rights and transparency obligations. Section 14 (Right to Information) requires controller to provide privacy notice at or before collection covering: identity + contact of controller + processor + DPO + purpose...

HU-INFOTV-Chap2-Transparency-DataSubject-Rights-Sections-14-23 · HU Infotv Chap II - Transparency + Data Subject Rights to Information, Access, Rectification, Erasure, Restriction (Sections 14-23)

Kuwait KDPPR Article 3 Data Subject Rights (modeled on GDPR Articles 12-22 + GCC convergence): (1) Right to Information about processing including identity of Controller + Processor + purposes + lawful basis + recipients + retention;

KDPPR-Data-Subject-Rights-Access-Correction-Erasure-Object-Restriction-Portability-Withdrawal-Article-3 · Kuwait KDPPR Data Subject Rights + Access + Correction + Erasure + Withdrawal of Consent

Morocco Law 09-08 Articles 7-11 Data Subject Rights regime (modeled on Convention 108 + EU Directive 95/46/EC era). Article 7 Right of Information - to be informed of processing existence + purposes + categories + recipients + free + first-instance + reasonabl...

MA-0908-Data-Subject-Rights-Access-Correction-Erasure-Object-Article-7-8-9-10-11-30-Day-SLA · Morocco Law 09-08 Data Subject Rights + Access + Correction + Erasure + Object + Article 7-11

Questions people ask about right to restriction

What is Right to Restriction?
The data subject's right to limit how an organization processes their personal data under specified circumstances while the data is retained.
Why is Right to Restriction important for compliance?
Right to Restriction is a key concept in Privacy and Data Protection. Understanding right to restriction helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Right to Restriction?
Right to Restriction appears in the requirement text of GDPR, PDPA Thailand, Hungary Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info Act), Italy Personal Data Protection Code (Legislative Decree No. 196/2003, amended 2018), Kuwait Data Privacy Protection Regulation (KDPPR, 2021 - CMA Directive). Across these standards we have identified 6 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Right to Restriction?
Explore our compliance framework pages to see how right to restriction applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Right to Restriction applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.