# Right to restriction of processing — GDPR — context bundle > Focused context for a single provision, curated from overview.legal on 2026-08-22. Canonical page: https://overview.legal/laws/gdpr/art-18 > Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it. ## Provision ### Right to restriction of processing — Right to restriction of processing *GDPR, gdpr-art-18-en — https://overview.legal/laws/gdpr/art-18* 1. The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; d) the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject. 2. Where processing has been restricted under paragraph 1, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. 3. A data subject who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction of processing is lifted. ## Enforcement 12 decision(s) on record cite Article 18, totalling approximately €1,326,700 in fines (median €24,600). Top fines: - **Fastweb S.p.A.: Non-compliance with general data processing principles** (ITALY, €1,000,000) — https://overview.legal/posts/48655 - **Energia Verde S.p.A.: Niet-naleving van de algemene principes voor gegevensverwerking.** (ITALY, €100,000) — https://overview.legal/posts/52295 - **Energia Verde S.p.A.: Non-compliance with general data processing principles** (ITALY, €100,000) — https://overview.legal/posts/48866 - **Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak: Insufficient fulfilment of data subjects rights** (HUNGARY, €54,800) — https://overview.legal/posts/46545 - **Vodafone – PANAFON A.E.E.T.: Insufficient fulfilment of data subjects rights** (Greece, €30,000) — https://overview.legal/posts/53557 ## Guidance ### Opinion 14/2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR *EDPB — https://overview.legal/posts/125682* Opinion 14 / 2026 on the Europrivacy certification criteria regarding their approval by the Board as European Data Protection Seal pursuant to Article 42.5 GDPR Adopted on 15 April 2026 1 | Adopted 2 | Adopted The European Data Protection Board Having regard to Article 63, Article 64 (2) and Article 42 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free… ### Coordinated Enforcement Action, *EDPB — https://overview.legal/posts/53740* EDPB, Coordinated Enforcement Action, implementation of the right to erasure by controllers ### Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation *EDPB — https://overview.legal/posts/50823* EDPB, Opinion 07/2025 regarding the European Commission Draft Implementing Decision pursuant to Regulation (EU) 2016/679 on the adequate protection of personal data by the European Patent Organisation, 2025. ### One-Stop-Shop case digest on right of access *EDPB — https://overview.legal/posts/50410* EDPB/SPE 16 jan 2025 One-Stop-Shop case digest on right of access. Een rapport opgesteld door Hanne Marie Motzfeldt (Københavns Universitet) waarin beslissingen inzake het inzagerecht onder het eenloketmechanisme worden geanalyseerd. ### Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria *EDPB — https://overview.legal/posts/125831* Adopted 1 Opinion 15/2023 on the draft decision of the Dutch Supervisory Authority regarding the Brand Compliance certification criteria Adopted on 19 09 2023 Adopted 2 Adopted 3 The European Data Protection Board Having regard to Article 63, Article 64(1)(c) and Article 42 of the Regulation 2016/679/EU of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and… ## Related topics - **Right to Restriction** — https://overview.legal/topics/right-to-restriction ## Legal Framework --- Generated by overview.legal · https://overview.legal/laws/gdpr/art-18 · 2026-08-22