Right to restrict processing

Data subjects have a right to ‘block’ or suppress processing of their personal data, i.e. to request that you immediately stop processing their personal data in any way except to store it. This right applies only if one of these requirements are met:

• A data subject contests the accuracy of the personal data - you should restrict processing until you have verified the accuracy.
• A data subject has objected to the processing (see above), and you are considering whether the University’s legitimate grounds override those of the data subject.
• Processing is unlawful, the data subject does not trigger the right to be forgotten, but requests restriction of use instead.
• You no longer need the personal data and would delete them in accordance with the retention schedule, but the data subject requires the data for a lawsuit.