• RMIGO home
• Records Management
• Freedom of Information
• Data Protection
  • What is personal data?
  • Principles
  • Privacy by design
  • Data Privacy Impact Assessments
  • Your information
  • Individuals' rights
    • Right of access
    • Right to rectification
    • Right to erasure
    • Right to restriction of processing
    • Right to data portability
    • Right to object
    • Rights related to automated decision making
  • Data security
  • Data breaches
  • Guidance
  • Training
  • Glossary
  • External resources
• ePrivacy
• Copyright
• University Archive
• Contact us

Restriction 

Under the GDPR, individuals have a right to ‘block’ or suppress processing of personal data.

Personal data can be ‘blocked’ or suppressed in the following situations:

1. Where an individual contests the accuracy of the personal data. Processing of this data will be restricted until the accuracy of the personal data has been verified.
2. Where an individual has objected to the processing of their personal data (where processing was necessary for the performance of a public task or purpose of legitimate interests) Processing of this data will be restricted for the duration of the investigation into whether our legitimate grounds override those of the individual.
3. Where processing is unlawful and data subject requests restriction instead of erasure
4. Where the University no longer requires the data but the data subject requires it to establish, exercise or defend a legal claim.

Where personal data has been disclosed to other parties, it is the University’s responsibility to contact each recipient and inform them of the need for correction unless this would be impossible to do or involve disproportionate effort.

If you wish to ‘block’ or suppress the processing of personal data relating to you, please notify dataprotection@york.ac.uk.