Case studies

"Everything at Advocates is done on a timed basis, so we need to conduct our research efficiently. We don't want to charge clients unnecessarily or write off our time. With Lexis products, we can get more research done each day"

Advocates

Access all 14 documents on Restriction of processing

GET ACCESS NOW

GLOSSARY

Restriction of processing definition

Published by a LexisNexis Practice Compliance expert

What does Restriction of processing mean?

“Restriction of processing” means the marking of stored personal data with the aim of limiting its processing for the future.

Speed up all aspects of your legal work with tools that help you to work faster and smarter. Win cases, close deals and grow your business–all whilst saving time and reducing risk.

Evaluating an objection to processing request—flowchart

Evaluating an objection to processing request—flowchart This document reflects the UK GDPR regime. References and links to the GDPR refer to the UK GDPR (Assimilated Regulation (EU) 2016/679) unless expressly stated otherwise. The UK General Data Protection Regulation (UK GDPR) provides a number of rights for data subjects, including providing a right to object. Data subjects can make a request to an organisation to exercise their right to object to processing at any time. This is not, however, an absolute right to object—it only applies in specific circumstances. There are strict time limits for complying with requests made. See Practice Notes: • Data subject rights—objection to processing • How to handle data subject requests This Flowchart maps out a process for evaluating a data subject request under the right to object that your organisation receives under the UK GDPR. It reflects the requirements in the UK GDPR and the Data Protection Act 2018 (DPA 2018) together with guidance issued by the Information Commissioner’s Office (ICO). It should be...

Evaluating a data rectification request—flowchart

Evaluating a data rectification request—flowchart This document reflects the UK GDPR regime. References and links to the GDPR refer to the UK GDPR (Assimilated Regulation (EU) 2016/679) unless expressly stated otherwise. The UK General Data Protection Regulation (UK GDPR) provides a number of rights for data subjects, including providing a right to rectification of personal data. Data subjects can make a request to an organisation to exercise their right to rectification of their personal data at any time and there are strict time limits for complying with requests made. See Practice Notes: • Data subject rights—rectification, erasure and restriction of processing • How to handle data subject requests This Flowchart maps out a process for evaluating rectification requests that your organisation receives under the UK GDPR. It reflects the requirements in the UK GDPR and the Data Protection Act 2018 (DPA 2018) together with guidance issued by the Information Commissioner's Office (ICO). It should be read in conjunction with Practice Note: How to handle data subject requests and Flowchart: Handling...

Discover our 2 Flowcharts on Restriction of processing

How to manage data protection compliance

How to manage data protection compliance This Practice Note is intended for commercial organisations based in the UK. It summarises key features of the UK General Data Protection Regulation (UK GDPR). It also provides practical guidance on what you need to do to ensure UK GDPR compliance and signposts relevant tools and Precedents in LexisNexis®. The challenge of ongoing compliance with the UK GDPR should not be underestimated, nor should the consequences of failing to comply—the potential for fines of £17.5m or 4% of annual global turnover. Does the UK GDPR apply to your organisation? The UK GDPR applies to all UK organisations that handle personal data. As it is virtually impossible to operate a business without handling personal data, it's probably safe to assume your organisation is caught by the UK GDPR. The UK GDPR also applies to organisations outside the UK that offer goods or services to individuals in the UK. For more guidance, see Practice Note: Introduction to the EU GDPR and...

How to manage data retention

How to manage data retention This Practice Note is intended for general commercial organisations based in the UK. It explains the retention requirements that apply to personal data and provides practical guidance on how to comply with these obligations. This Practice Note reflects the UK General Data Protection Regulation (UK GDPR), (Assimilated Regulation (EU) 2016/679). The data retention requirements arise out of the storage limitation principle in the UK GDPR. You must not keep personal data for longer than you actually need it. You should delete or anonymise personal data once it is no longer required. Good practice around storage limitation can also reduce the burden of dealing with questions about retention and individual requests for erasure. It will also limit the risk of individuals’ data being used in error or in ways which could adversely affect their rights and freedoms under the UK GDPR. From a practical perspective, it is inefficient to hold more personal data than you need, and you could be incurring unnecessary...

Discover our 4 Practice Notes on Restriction of processing

Privacy notice for trustees—UK GDPR compliant

Privacy notice for trustees—UK GDPR compliant We take your privacy very seriously. Please read this privacy notice carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint. We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR). [We are also subject to the EU General Data Protection Regulation (EU GDPR) in relation to individuals [and our wider operations ]in the European Economic Area (EEA)]. Key terms It would be helpful to start by explaining some key terms used in this notice: We, us, our [Insert full legal name of all the trustees or, if the trustees are a professional firm, insert the firm’s name (if acting...

Privacy policy—general commercial organisation—customer-facing

Privacy policy—general commercial organisation—customer-facing We take your privacy very seriously. Please read this privacy policy carefully as it contains important information on who we are and how and why we collect, store, use and share your personal data. It also explains your rights in relation to your personal data and how to contact us or supervisory authorities in the event you have a complaint. We collect, use and are responsible for certain personal data about you. When we do so we are subject to the UK General Data Protection Regulation (UK GDPR). [We are also subject to the EU General Data Protection Regulation (EU GDPR) in relation to goods and services we offer to individuals [and our wider operations ]in the European Economic Area (EEA).] Key terms It would be helpful to start by explaining some key terms used in this policy: We, us, our [Insert full legal name of your organisation, together with any trading name or names that may be more familiar to the...

Dive into our 10 Precedents related to Restriction of processing