The Right to Restrict Processing
Individuals have a right to ‘block’ or suppress processing of personal data.
When processing is restricted, organisations are permitted to store the personal data, but not further process it. Organisations can retain just enough information about the individual to ensure that the restriction is respected in future.
The right to restrict processing is not an absolute right and only applies in certain circumstances.
We are required to restrict the processing of your personal data in the following circumstances:
- Where you contest the accuracy of your personal data, we must restrict the processing until we have verified the accuracy of your personal data.
- We have unlawfully processed your personal data and you oppose the erasure and request restriction instead;
- We no longer need the personal data but you need us to keep it in order to establish, exercise or defend a legal claim; or
- You have objected to us processing your data under Article 21(1), and we are considering whether our legitimate grounds override your right to object.
From the 25 May 2018 requests for erasure will be accepted verbally or in writing, however proof of identity may be required. If proof of identity is sought then the one month will commence when your identity is confirmed.
We may extend the time to respond to you by a further two months if your request is complex or numerous. If there is a delay in dealing with your request we will inform you within one month of receipt of the request and explain why the extension is necessary.
We may also request a reasonable fee or refuse to comply with your request for restriction if we consider it is manifestly unfounded or excessive. We will write to you within one month of receipt of your request and explain our decision. Any fee will be based on the administrative costs of complying with the request. If we charge a fee then your request will not be processed until the fee is received.
If we refuse to process your request we will explain why and inform you of your right to complain to the Information Commissioner, and to a judicial remedy within one month of receipt.
If we have disclosed personal data to others, which we subsequently restrict on request, then we will contact the recipient(s) and inform them of the erasure, unless to do so proves impossible or involves disproportionate effort.
We will also advise you when the restriction on processing is lifted.
If you would like to have the processing of your person data restricted please click hereto make a How to Make an Information Rights Request.