Restriction can pause use without erasing data
Restriction is the middle option: keep the data, stop using it, while something is resolved.
It applies while accuracy is disputed or a legitimate interests objection is considered. Most systems have no way to express it, so it gets implemented as either deletion or nothing. Being able to mark a record as held but not processed is a genuine engineering requirement that almost nobody builds for.
More on UK GDPR
- Lawful basis is the reason processing is permittedIt will not turn without the reason
- Consent is one lawful basis, not the default answerOne setting out of six
- Access rights concern personal data, not every documentThe lines about you, not the page
- Erasure is not an absolute delete buttonIt will not travel the whole way
- Data portability is narrower than a database exportOnly what fits the frame
- Rectification requires organisations to be able to correct inaccurate personal data wherever it is maintainedCorrect it once, then chase every copy
