Data subject rights—rectification, erasure and restriction of processing

Copyright © 2025 LexisNexis
Published by a LexisNexis Risk & Compliance expert
Practice notes

Data subject rights—rectification, erasure and restriction of processing

Copyright © 2025 LexisNexis

Published by a LexisNexis Risk & Compliance expert

Practice notes
imgtext

This Practice Note explains the rights to rectification, erasure (also known as the right to be forgotten) and restriction of processing contained in the UK GDPR, and considers compliance strategies for businesses.

For detailed guidance on handling data subject requests, see:

  1. •

    Practice Note: How to handle data subject requests, and

  2. •

    Handling data subject requests—flowchart

The rights to rectification, erasure and restriction of processing and other data subject rights

The rights to rectification, erasure and restriction of processing are part of a larger package of data subject rights, including:

  1. •

    a right of access

  2. •

    the right to data portability

  3. •

    a right to object to processing

  4. •

    the right not to be subject to a decision based solely on automated processing, including profiling

Other data subject rights could be impacted when processing a rectification, erasure or restriction of processing request.

The rights to rectification, erasure and restriction of processing—what are they and when do they apply?

RightWhat is it?When does it apply?
RectificationArticle 16 of Assimilated
Powered by Lexis+®
Jurisdiction(s):
United Kingdom
Key definition:
Rectification definition
What does Rectification mean?

Alteration of the Register of Title which involves the correction of a mistake and which prejudicially affects the title of a registered proprietor.

Read more readmore

Popular documents

Training materials—GDPR and data protection compliance—for staff

Training materials—GDPR and data protection compliance—for staffThis Precedent presentation has been designed as an aid to train your staff on the general principles of data protection and how to manage this in the workplace. This Precedent is of general application, but incorporates the

Can a limited company make a subject access request? Can a director of a limited company ask for

Can a limited company make a subject access request? Can a director of a limited company ask for recordings of calls with us? If yes, what personal data must we provide?This Q&A draws on the Information Commissioner’s Office’s (ICO’s) guidance on business-to-business marketing, which may or may

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?

Refusing a data subject request—what is ‘manifestly unfounded or excessive’?The General Data Protection Regulation (GDPR) provides for enhanced rights for data subjects, including providing rights of access, rectification, erasure and restriction of processing, data portability, a right to object to

Data protection officer—DPO—job description and role profile

Data protection officer—DPO—job description and role profile1DPO detailsName of organisation[Insert name of organisation]Name of DPO[Insert name]Reports to[Insert name and/or position]Full time/part time[Insert]Details of any other roles held within the organisation[Insert details of any other roles