Limiting Data Subject Rights and the Application of Article 23 of the GDPR

Alongside the new and restated rights of data subjects under data protection law, the GDPR also prescribes a mechanism (per Article 23) to permit the restrictions of those rights specific circumstances. The purpose of these guidelines is to assist organisations to assess, implement, and apply lawful restrictions of those rights and obligations provided for in Articles 12 – 22 and Article 34 GDPR.

Limiting Data Subject Rights and the Application of Article 23 of the GDPR - Full Guidance Note