Restriction of Processing

A data subject right under GDPR Article 18 to limit how their personal data may be used while preserving its storage, essentially placing data in a holding state. When processing is restricted, organizations can only store the data and process it with the data subject's consent, for legal claims, to protect others' rights, or for public interest reasons. Individuals can request restriction when they contest data accuracy (during verification), processing is unlawful but they prefer restriction over deletion, the organization no longer needs the data but the individual needs it for legal claims, or they've objected to processing pending verification of legitimate grounds. Organizations must mark restricted data to prevent improper processing, notify recipients of the restriction, and inform the data subject before lifting restrictions. This right provides a middle ground between full processing and deletion, allowing individuals to pause processing without losing their data. It's particularly useful when accuracy disputes need resolution or legal proceedings are pending.