The European Data Protection Board adopted a final version of its guidelines on restrictions of data subject rights under the EU General Data Protection Regulation’s Article 23. The guidelines, which follow a public consultation, “provide a thorough analysis of the criteria to apply restrictions, the assessments that need to be observed, how data subjects can exercise their rights after the restrictions are lifted, and the consequences of infringements of (Article) 23,” the EDPB said.