{
  "url": "https://openlegislation.uk/eu-decision-2019-236/article-8",
  "json_url": "https://openlegislation.uk/eu-decision-2019-236/article-8.json",
  "legislation": "eudn/2019/236",
  "legislation_title": "Commission Decision (EU) 2019/236 of 7 February 2019 laying down internal rules concerning the provision of information to data subjects and the restriction of certain of their rights in the context of the processing of personal data by the European Commission for the purposes of internal security of the Union institutions",
  "legislation_url": "https://openlegislation.uk/eu-decision-2019-236",
  "path": "article/8",
  "kind": "article",
  "number": "8",
  "heading": "Review by the Data Protection Officer",
  "text": "1. The Data Protection Officer of the Commission shall be informed, without undue delay, whenever data subjects' rights are restricted in accordance with this Decision. Upon request, the Data Protection Officer shall be provided with access to the record and any documents containing underlying factual and legal elements.\n2. The Data Protection Officer of the Commission may request a review of the restrictions. The Data Protection Officer shall be informed about the outcome of the requested review.\n3. The information exchanges with the Data Protection Officer throughout the procedure shall be recorded in the appropriate form.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2019/236/article/8",
    "retrieved_at": "2026-11-01T15:12:50.141365+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}