Article 4 Right of access by data subject, right of erasure and right to restriction of processing
United Kingdom
Where the Commission restricts, wholly or partly, the right of access to personal data by data subjects, the right of erasure, or the right to restriction of processing as referred to respectively in Articles 17, 19 and 20 of Regulation (EU) 2018/1725, it shall inform the data subject concerned, in its reply to the request for access, erasure or restriction of processing,
of the restriction applied and of the principal reasons thereof; and
of the possibility of lodging a complaint with the European Data Protection Supervisor or of seeking a judicial remedy in the Court of Justice of the European Union.
The provision of information concerning the reasons for the restriction referred to in paragraph 1 may be deferred, omitted or denied for as long as it would undermine the purpose of the restriction.
The Commission shall record and register the reasons for the restriction in accordance with Article 6 of this Decision.
Where the right of access is wholly or partly restricted, the data subject is entitled to exercise his or her right of access, in accordance with Article 25(6), (7) and (8) of Regulation (EU) 2018/1725. The data subject may submit a complaint to the European Data Protection Supervisor where he or she considers that his or her rights have been unlawfully denied or restricted.