IrelandCan I restrict how a company uses my data?
Yes, under Irish data protection law, you have the right to restrict how a company processes your personal data in certain situations, such as when you contest its accuracy or object to processing.
What the Law Says
The Data Protection Act 2018 gives effect in Ireland to the EU General Data Protection Regulation (GDPR), including your right to restrict how your personal data is processed. This right allows you to limit the ways a company may use your data — for example, while accuracy is being verified or if processing is unlawful.
Under section 57 of the Data Protection Act 2018, individuals have the right to obtain restriction of processing of their personal data in specific circumstances. This means a company must stop using your data in certain ways — such as storing it without further processing — while still being allowed to store it.
The law requires controllers (e.g., companies) to respond to a valid restriction request without undue delay — and in any case within one month (extendable by two months where necessary, with explanation). The restriction applies until the controller verifies the accuracy of the data, assesses the legitimate grounds for processing, or resolves an objection.
This right is not absolute: it only applies in defined situations, such as when you contest the accuracy of your data, when processing is unlawful but you oppose erasure, when you need the data for legal claims, or when you have objected to processing pending verification of legitimate grounds.
Statutory TextThe data subject shall have the right to obtain restriction of processing where one of the following applies: (a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data; (b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; (c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; (d) the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
— Data Protection Act 2018, s. 57 — Right to restriction of processing
What to Do
Contact the company (data controller) in writing or via their official data protection contact, clearly stating you are exercising your right to restriction under section 57 of the Data Protection Act 2018.
Specify which data you’re referring to and the reason (e.g., 'I dispute the accuracy of my address on file').
Keep a copy of your request and any response. The company must reply within one month.
If they refuse or ignore your request, you may lodge a complaint with the Data Protection Commission (DPC) at www.dataprotection.ie.
Sources
Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: 2026-06-08.