EDPB adopts Guidelines on restrictions of data subject rights under Article 23 GDPR following public consultation

Oct 19, 2021

Source: European Data Protection Board

During its October plenary, the EDPB adopted a final version of the Guidelines on restrictions of data subject rights under Art. 23 GDPR following public consultation. The guidelines aim to recall the conditions surrounding the use of such restrictions by Member States or the EU legislator in light of the Charter of Fundamental Rights and the GDPR. They provide a thorough analysis of the criteria to apply restrictions, the assessments that need to be observed, how data subjects can exercise their rights after the restrictions are lifted, and the consequences of infringements of Art. 23 GDPR. Additionally, the guidelines analyse how the legislative measures setting out the restrictions need to meet the foreseeability requirement and examine the grounds for the restrictions listed by Art. 23(1) GDPR, and the obligations and rights which may be restricted.

Recent news

EDPB adopts letters to UN & ENISA

During its November plenary, the EDPB adopted a letter in reply to the UN concerning transfers to international organisations. In the letter, the EDPB welcomes the UN’s continuous participation in the Task Force on transfers to international organisations established...

read more

Dutch DPA fines Transavia for poor personal data security

Background information Date of final decision: 23 September 2021 Cross-border case or national case: cross-border case If cross-border, LSA: Netherlands and CSAs: Ireland, France, Belgium, Denmark, Poland, Cyprus, Italy, Baden-Württemberg, Austria, Finland, Sweden,...

read more