# Right to restriction of processing 18(1) — GDPR — provision context

> Focused context for a single provision (18(1)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-18#par-1
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Right to restriction of processing** (GDPR, full article: https://overview.legal/laws/gdpr/art-18).

## Provision text

### 18(1)

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
d) the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

## Topics on this provision

- **Right to Restriction** — https://overview.legal/topics/right-to-restriction
  Right to restrict processing of personal data
- **Personal Data** — https://overview.legal/topics/persoonsgegevens
  Information relating to identified or identifiable natural persons
- **Controllers** — https://overview.legal/topics/controllers
  Entities that determine purposes and means of processing

## Cited by (exact-provision citations)

- **Judgment of the General Court (Eighth Chamber, Extended Composition) of 26 April 2023.#Single Resolution Board v European Data Protection Supervisor.#Protection of personal data – Procedure for granting compensation to shareholders and creditors following the resolution of a bank – Decision of the EDPS in which it found that the SRB failed to fulfil its obligations concerning the processing of personal data – Article 15(1)(d) of Regulation (EU) 2018/1725 – Concept of personal data – Article 3(1)** (case-law) — https://overview.legal/posts/132290
- **CJEU - C-205/21 - Ministerstvo na vatreshnite raboti** (case-law) — https://overview.legal/posts/158437
- **Judgment of the Court (First Chamber) of 4 September 2025.#European Data Protection Supervisor v Single Resolution Board.#Appeal – Protection of natural persons with regard to the processing of personal data – Procedure for granting compensation to shareholders and creditors of a banking institution following the resolution of that institution – Decision of the European Data Protection Supervisor finding that the Single Resolution Board failed to fulfil its obligations relating to the processing** (case-law) — https://overview.legal/posts/132136
- **Judgment of the Court (Fifth Chamber) of 4 May 2023.#UZ v Bundesrepublik Deutschland.#Request for a preliminary ruling from the Verwaltungsgericht Wiesbaden.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Regulation (EU) 2016/679 – Article 5 – Principles relating to processing – Controllership – Article 6 – Lawfulness of processing – Electronic file compiled by an administrative authority relating to an asylum application – Tra** (case-law) — https://overview.legal/posts/132289
- **Judgment of the Court (Fifth Chamber) of 26 January 2023.#Criminal proceedings against V.S.#Request for a preliminary ruling from the Spetsializiran nakazatelen sad.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data – Directive (EU) 2016/680 – Article 4(1)(a) to (c) – Principles relating to processing of personal data – Purpose limitation – Data minimisation – Article 6(a) – Clear distinction between personal data of different categ** (case-law) — https://overview.legal/posts/132297
- **OLG München - 36 U 1054/25 e** (case-law) — https://overview.legal/posts/184545
- **RYNES V. ÚŘAD PRO OCHRANU OSOBNICH ÚDAJŮ, 11.12.2014 (“RYNES”)** (case-law) — https://overview.legal/posts/6155
- **GC - T-318/24** (case-law) — https://overview.legal/posts/122878
- **Judgment of the General Court (Fourth Chamber, Extended Composition) of 7 June 2023.#TC v European Parliament.#Law governing the institutions – Rules governing expenses and allowances for Members of Parliament – Parliamentary assistance allowance – Recovery of sums unduly paid – Reasonable time – Burden of proof – Right to be heard – Protection of personal data – Article 9 of Regulation (EU) 2018/1725 – Article 26 of the Staff Regulations.#Case T-309/21.** (case-law) — https://overview.legal/posts/132285
- **Judgment of the General Court (Fifth Chamber, Extended Composition) of 24 May 2023.#Meta Platforms Ireland Ltd, formerly Facebook Ireland Ltd v European Commission.#Competition – Data market – Administrative procedure – Article 18(3) and Article 24(1)(d) of Regulation (EC) No 1/2003 – Request for information – Virtual data room – Obligation to state reasons – Legal certainty – Rights of the defence – Necessity of the information requested – Misuse of powers – Right to privacy – Proportionality –** (case-law) — https://overview.legal/posts/132287
- **VOLKER UND MARKUS SCHECKE GBR V. LAND HESSEN, EIFERT V. LAND HESSEN AND BUNDESANSTALT FUR LANDWIRTSCHAFT UND ERNAHRUNG, 9.Nov.2010 (“SCHECKE”)** (case-law) — https://overview.legal/posts/6180
- **Judgment of the General Court (Eighth Chamber, Extended Composition) of 26 April 2023.#Single Resolution Board v European Data Protection Supervisor.#Protection of personal data – Procedure for granting compensation to shareholders and creditors following the resolution of a bank – Decision of the EDPS in which it found that the SRB failed to fulfil its obligations concerning the processing of personal data – Article 15(1)(d) of Regulation (EU) 2018/1725 – Concept of personal data – Article 3(1)** ¶4 (case-law, General Court) — https://overview.legal/posts/132290

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-18#par-1 · 2026-08-22