European Union: EDPB closes consultation on Version 1.0 of guidelines on restrictions in Art. 23 GDPR

On 12 February 2021, the European Data Protection Board (EDPB) closed its consultation on the guidelines it published on 15 December 2020 regarding the assessment of the meaning and scope of 'restrictions' in Art. 23 of the General Data Protection Regulation (GDPR). On 18 December 2020, the EDPB opened a consultation as part of the publishing of the guidance. Restrictions are defined by the guidelines as any limitation of the scope of the rights and obligations in Arts. 12, 22, 34, and (where relevant) 5 of the GDPR. The guidelines contain a detailed discussion of the legitimate scope and grounds of restrictions (Art.23(1)) and the information which must be specified in a restricting law (Art.23(2)). Further, they reemphasize the exceptional nature of all restrictions under Art.23, requiring them to respect the essence of the fundamental right to data protection and the principle of proportionality.