The Right to Restrict Processing: What It Means in Practice

Under Article 18 of the UK GDPR, individuals can limit how their data is used. Here’s when and how restriction applies

Article 18 of the UK GDPR gives people the right to restrict how their data is used in specific scenarios, such as:

• While contesting accuracy
• If processing is unlawful but the data subject doesn’t want erasure
• When the company no longer needs the data, but the person needs it for legal claims

During restriction, you may store data but not use it. You must notify the individual before lifting the restriction.

💡 Tip:

Use data flags or workflow tags in your systems to mark records as restricted. Manual tracking = mistakes.