# Restrictions 23(2) — GDPR — provision context

> Focused context for a single provision (23(2)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-23#par-2
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Restrictions** (GDPR, full article: https://overview.legal/laws/gdpr/art-23).

## Provision text

### 23(2)

In particular, any legislative measure referred to in paragraph 1 shall contain specific provisions at least, where relevant, as to:

a) the purposes of the processing or categories of processing;
b) the categories of personal data;
c) the scope of the restrictions introduced;
d) the safeguards to prevent abuse or unlawful access or transfer;
e) the specification of the controller or categories of controllers;
f) the storage periods and the applicable safeguards taking into account the nature, scope and purposes of the processing or categories of processing;
g) the risks to the rights and freedoms of data subjects; and
h) the right of data subjects to be informed about the restriction, unless that may be prejudicial to the purpose of the restriction.

## Cited by (exact-provision citations)

- **Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per** (case-law) — https://overview.legal/posts/132371
- **VG München - M 26a K 25.5210** (case-law) — https://overview.legal/posts/108991
- **Judgment of the Court (Grand Chamber) of 20 September 2022.#Criminal proceedings against VD bd]
 
 Criminal proceedings against VD and SR.#Requests for a preliminary ruling from the Cour de cassation.#References for a preliminary ruling – Single market for financial services – Market abuse – Insider dealing – Directive 2003/6/EC – Article 12(2)(a) and (d) – Regulation (EU) No 596/2014 – Article 23(2)(g) and (h) – Supervisory and investigatory powers of the Autorité des marchés financiers** (case-law) — https://overview.legal/posts/132308
- **PHR - 22/01253** (case-law) — https://overview.legal/posts/125598
- **Judgment of the Court (Sixth Chamber) of 18 November 1999.#Commission of the European Communities v Council of the European Union.#Regulation (EC) nº 515/97 - Legal basis - Article 235 of the EC Treaty (now Article 308 EC) or Article 100a of the EC Treaty (now, after amendment, Article 95 EC).#Case C-209/97.** ¶8 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132405
- **Judgment of the Court (Grand Chamber), 8 April 2014.#European Commission v Hungary.#Failure of a Member State to fulfil obligations — Directive 95/46/EC — Protection of individuals with regard to the processing of personal data and the free movement of such data — Article 28(1) — National supervisory authorities — Independence — National legislation prematurely bringing to an end the term served by the supervisory authority — Creation of a new supervisory authority and appointment of another per** ¶57 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132371
- **Judgment of the Court (Grand Chamber) of 20 September 2022.#Criminal proceedings against VD bd]
 
 Criminal proceedings against VD and SR.#Requests for a preliminary ruling from the Cour de cassation.#References for a preliminary ruling – Single market for financial services – Market abuse – Insider dealing – Directive 2003/6/EC – Article 12(2)(a) and (d) – Regulation (EU) No 596/2014 – Article 23(2)(g) and (h) – Supervisory and investigatory powers of the Autorité des marchés financiers** ¶74 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132308
- **Judgment of the Court (Sixth Chamber) of 18 November 1999.#Commission of the European Communities v Council of the European Union.#Regulation (EC) nº 515/97 - Legal basis - Article 235 of the EC Treaty (now Article 308 EC) or Article 100a of the EC Treaty (now, after amendment, Article 95 EC).#Case C-209/97.** ¶9 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132405
- **Opinion 20/2021 on Tobacco Traceability System** (guidance) — https://overview.legal/posts/126018
- **Statement on restrictions on data subject rights in connection to the state of emergency in Member States** (guidance) — https://overview.legal/posts/126146
- **Guidelines 10/2020 on restrictions under Article 23 GDPR** (guidance) — https://overview.legal/posts/38062
- **Guidelines 04/2022 on the calculation of administrative fines under the GDPR** (guidance) — https://overview.legal/posts/38068

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-23#par-2 · 2026-08-22