Right to restrict processing

The right to restriction of processing allows data subject to ask for restriction of the processing of their personal data if:

•the data is inaccurate
•the processing is unlawful but the data subject does not want the data to be erased and requests restriction (which is different from the right to be erased)
•the data controller no longer needs data for the original purpose, but the data subject wants the data to be preserved so the legal claim can be exercised
•the data controller is taking measures to verify the data erasure request

From the operational point of view, Recital 67 of the GDPR provides some guidance for the companies explaining:

Methods by which to restrict the processing of personal data could include, inter alia, temporarily moving the selected data to another processing system, making the selected personal data unavailable to users, or temporarily removing published data from a website. In automated filing systems, the restriction of processing should in principle be ensured by technical means in such a manner that the personal data are not subject to further processing operations and cannot be changed.