Restriction of Personal Information

Restriction of Personal Information

Restriction of Personal Information means that the Personal Information can still be stored, but it can only be Processed for the purposes of proof, or with the Data Subject’s consent, or for protecting the rights of another natural or legal person, or if it is in the public interest.

The Data Subject must be notified before a restriction on their Record/Personal Information is lifted.

The Processing of Personal Information must be restricted:

• if the Data Subject contests the accuracy of the Personal Information. The Record must be restricted while the Responsible Party investigates;
• when the Responsible Party no longer needs the Personal Information for the purpose it was collected for, but the Record needs to be retained for evidentiary purposes;
• if the Processing of the Personal Information is unlawful, the Data Subject can request that the Record containing the Personal Information be restricted, rather than deleted;
• if the Data Subject requests that the Responsible Party transfer their Personal Information into another automated Processing system, the Personal Information must be kept in a restricted system for this purpose.