Article 23 Restrictions

Author(s):  
Dominique Moore

Article 5 (Principles relating to processing of personal data) (see too recitals 41, 45 and 50); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 13 (Information to be provided where personal data are collected from the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 16 (Right to rectification); Article 17 (Right to erasure, ‘right to be forgotten’); Article 18 (Right to restriction of processing); Article 20 (Right to data portability); Article 21 (Right to object); Article 22 (Automated individual decision-making, including profiling); Article 34 (Communication of a personal data breach to the data subject).

Author(s):  
Lee A. Bygrave ◽  
Luca Tosoni

Article 5 (Principles relating to processing of personal data) (see also recitals 33, 39 and 50); Article 6(1)(a) (Lawfulness of processing on basis of consent) (see too recital 40); Article 7 (Conditions for consent) (see also recital 42); Article 8 (Conditions applicable to child’s consent in relation to information society services) (see too recital 38); Article 9(2)(a) (Processing of special categories of personal data on basis of consent) (see too recital 51); Article 13 (Information to be provided where personal data are collected from the data subject) (see too recitals 60–62); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 17 (Right to erasure) (see too recital 65); Article 20 (Right to data portability) (see too recital 68); Article 22 (Automated individual decision-making, including profiling) (see too recital 71); Article 49(1)(a) (Transfer of personal data to third country or international organisation on basis of consent) (see too recitals 111–112).


Author(s):  
Ludmila Georgieva ◽  
Christopher Kuner

Article 4(1) (Definition of personal data); Article 4(2) (Definition of processing); Article 4(11) (Definition of consent); Article 4(13) (Definition of genetic data, see also recital 34); Article 4(14) (Definition of biometric data); Article 4(15) (Definition of data concerning health, see also recital 35); Article 6(4)(c) (Lawfulness of processing, compatibility test) (see too recital 46 on vital interest); Article 13(2)(c) (Information to be provided where personal data are collected from the data subject); Article 17(1)(b), (3)(c) (Right to erasure (‘right to be forgotten’)); Article 20(1)(a) (Right to data portability); Article 22(4) (Automated individual decision-making, including profiling); Article 27(2)(a) (Representatives of controllers or processors not established in the Union); Article 30(5) (Records of processing activities); Article 35(3)(b) (Data protection impact assessment) (see too recital 91); Article 37(1)(c) (Designation of the data protection officer) (see too recital 97); Article 83(5)(a) (General conditions for imposing administrative fines).


Author(s):  
Gabriela Zanfir-Fortuna

Article 5(1) (Principle of fairness, lawfulness and transparency); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 23 (Restrictions); Article 34 (Communication of a personal data breach to the data subject).


Author(s):  
Eleni Kosta

Article 7 (Conditions for consent); Article 12 (Transparent information, communication and modalities of exercise of the rights of the data subject) (see also recital 58); Article 40(2)(g) (Codes of conduct); Article 22 (Automated individual decision-making) (see also recital 71); Article 35 (Data Protection Impact Assessments).


Author(s):  
Gabriela Zanfir-Fortuna

Article 5(1) (Principle of fairness, lawfulness and transparency); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 23 (Restrictions); Article 34 (Communication of a personal data breach to the data subject).


Author(s):  
Gabriela Zanfir-Fortuna

Article 5(1) (Principles of fairness, lawfulness and transparency) (see too recital 39); Article 11 (Processing which does not require identification) (see too recital 57); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) (see too recitals 58–59); Article 13 (Information to be provided where personal data are collected from the data subject) (see too recital 60); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 23 (Restrictions) (see too recital 73).


Author(s):  
Lee A. Bygrave

Article 3(2)(b) (Monitoring of data subjects’ behaviour); Article 4(4) (Definition of ‘profiling’); Article 5(1)(a) (Fair and transparent processing) (see also recitals 39 and 60); Article 5(2) (Accountability); Article 6 (Legal grounds for processing of personal data); Article 8 (Conditions applicable to children’s consent in relation to information society services); Article 12 (see too recital 58); Article 13(2)(f) (Information on the existence of automated decision-making); Article 14(2)(g) (Information on the existence of automated decision-making); Article 15(1)(h) (Right of access regarding automated decision-making); Article 21 (Right to object) (see also recital 70); Article 23 (Restrictions); Article 35(3)(a) (Data protection impact assessment) (see too recital 84); Article 47(2)(e) (Binding corporate rules); Article 70(1)(f) (EDPB guidelines on automated decisions based on profiling).


Author(s):  
Gloria González Fuster

Article 4(9) (Definition of ‘recipient’); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject); Article 16 (Right to rectification), Article 17(1) (Right to erasure (‘right to be forgotten’)); Article 18 (Right to restriction of processing); Article 58(2)(g) (Powers of supervisory authorities); Article 89(3) (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes).


Author(s):  
Helena U. Vrabec

Chapter 7 analyses the right to data portability set out in Article 20 of the GDPR. It first provides an overview of several commercial and regulatory initiatives that preceded the GDPR version of the right to personal data portability. Next, it explores the language of Article 20 to demonstrate the effects of the narrow scope of the right. The chapter then shows how data portability interacts with other data subject rights, particularly with the right to access and the right to be forgotten, before it describes manifestations of data portability in legal areas outside of the data protection law. Finally, the chapter explores the specific objective of the right to data portability under the GDPR as an enabler of data subjects’ control.


Author(s):  
Cécile de Terwangne

Article 5(d) (Principles relating to processing of personal data—accuracy) (see too recital 39); Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject) (see too recital 59); Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing); Article 23 (Restrictions) (see too recital 73); Article 89 (Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes) (see too recital 156).


Sign in / Sign up

Export Citation Format

Share Document