# UAE PDPL Article (16): Right to Restrict Processing

Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data (UAE PDPL), version 2026.1, in force since 2 January 2022. Read from https://uaelegislation.gov.ae/ar/legislations/1972/download. Each clause starts with its key, which is how to cite it.

This is the official English translation. Where the two differ, the Arabic text prevails: https://dpolens.com/ar/laws/uae-pdpl/art-16.md

## uae-pdpl:art-16:para-1

1. The Data Subject shall have the right to oblige the Controller to restrict and stop processing in any of the following cases:

### uae-pdpl:art-16:para-1:pt-a

a. The Data Subject's objection to the accuracy of the Personal Data, in which case the processing shall be restricted for a specific period to allow the Controller to verify the data accuracy.

### uae-pdpl:art-16:para-1:pt-b

b. The Data Subject's objection to the processing of his/ her Personal Data in violation of the agreed-upon purposes.

### uae-pdpl:art-16:para-1:pt-c

c. The processing is carried out in violation of the provisions of this Decree by Law and the applicable legislations.

## uae-pdpl:art-16:para-2

2. The Data Subject shall have the right to request the Controller to continue to keep his/ her Personal Data after the completion of the processing purposes when such data is necessary to complete procedures related to claiming or defending rights and lawsuits.

## uae-pdpl:art-16:para-3

3. Notwithstanding what is stated in Paragraph (1) of this Article, the Controller may proceed with the processing of the Personal Data of the Data Subject without his/ her consent in any of the following cases:

### uae-pdpl:art-16:para-3:pt-a

a. If the processing is limited to storing Personal Data.

### uae-pdpl:art-16:para-3:pt-b

b. If the processing is necessary to pursue any of the procedures related to claiming or defending rights and lawsuits or related to judicial proceedings.

### uae-pdpl:art-16:para-3:pt-c

c. If the processing is necessary to protect the rights of third parties.

### uae-pdpl:art-16:para-3:pt-d

d. If the processing is necessary to protect the public interest.

## uae-pdpl:art-16:para-4

4. In all cases, the Controller, if it lifts the restriction stipulated in this Article, shall notify the Data Subject of the same.

Page: https://dpolens.com/laws/uae-pdpl/art-16