One of the data subject rights in the UK GDPR is to obtain restriction of processing of their personal data. Our form provides a straightforward way for them to make a request for this.
The statutory right
Under the UK GDPR, an individual can require you to restrict processing of their personal data where any one of the following applies:
Form of request
Although you can make available our GDPR Restriction of Processing Request Form to enable individuals to make rectification requests, they can still make their request by any means as the UK GDPR doesn’t set out a specific form of request. Our form asks the individual to provide sufficient details to enable you to identify them and the specific personal data in respect of which they wish processing to be restricted. It also asks them to confirm which of the four grounds above they’re relying on in making their request to restrict processing.
Third-party recipients
You must communicate any restriction of processing carried out in accordance with this provision to each third-party recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
compliance deadline
An individual has the right to require you to restrict the processing of their personal data without undue delay, and in any event within one month of receipt of the request. However, that period can be extended by two further months where necessary, taking into account the complexity and number of their requests. Where an individual obtains restriction of processing under these provisions, you must then inform them before that restriction of processing is subsequently lifted.