Set by the law · GDPR Art. 23(1)
Restrictions of rights
In plain English
EU or national law may limit data subjects' rights and some related duties, but only by legislation that respects the essence of fundamental rights and is necessary and proportionate to protect interests the GDPR lists.
The official text
Union or Member State law to which the data controller or processor is subject may restrict by way of a legislative measure the scope of the obligations and rights provided for in Articles 12 to 22 and Article 34, … when such a restriction respects the essence of the fundamental rights and freedoms and is a necessary and proportionate measure in a democratic society to safeguard:
5 decisions on Fino cite Article 23 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.