Restriction request (GDPR Art. 18) — template + guide

Restriction sits between "do nothing" and "delete everything". See our article Right to restriction. 4 grounds to demand it: (1) You contest accuracy + verification is running. (2) Unlawful processing but you don't want erasure. (3) Data no longer needed at business but you need it for legal claim. (4) Objection Art. 21 — balancing still pending. Practical scenarios: ex-employer HR data + reference request, contested credit registration, credit-bureau error in objection procedure. How to request? In writing with ground (one of 4) + what you want frozen. Template: adapt our access generator with "request under Art. 18(1)(a/b/c/d) for restriction". What MAY the business still do? Only storage + your consent + legal claim + vital interest of others. Nothing else. On lifting restriction the business must inform you first. Bundle: GDPR rights pack (€29).