A data subject asks a controller to restrict processing while the controller verifies whether legitimate interests override the objection. What is the appropriate treatment of restriction in this situation?
Select an answer to reveal the explanation.
Short Explanation
Picture hitting pause on a playlist while someone checks the volume rules. Restriction is that pause—keep the data, stop most processing—while the controller checks whether its legitimate interests really win. It is not an automatic erase-everything button.
Full Explanation
Article 18 provides for restriction of processing in defined situations, including where the data subject has objected under Article 21 pending verification whether the controller’s legitimate grounds override those of the data subject. During restriction, processing is largely limited to storage and narrowly allowed further uses. Immediate wholesale erasure is a different right with different grounds, and restriction is not reserved solely for supervisory orders.