Contents
(1)paragraph 6 is replaced by the following:‘6.A decision to restrict the rights of a data subject pursuant to paragraph 1 or 2 that is to be taken by the controller shall be made at the level of the relevant business area head in whose business area the main processing operation involving the personal data is carried out. If such main processing operation is carried out by a function that is not part of a business area, such a decision shall be made at the level of the holder of the function.’;
Source: EUR-Lex, © European Union, 1998-2026. Reuse authorised under Decision 2011/833/EU.