Art. 19 GDPR · Chapter III: Rights of the data subject · Section 3: Rectification and erasure
Article 19 GDPR: Notification obligation regarding rectification or erasure of personal data or restriction of processing
Text as of 28 October 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026
Summary (not the official text)
The controller must tell each recipient to whom personal data were disclosed about any rectification, erasure or restriction, unless this proves impossible or involves disproportionate effort, and must tell the data subject about those recipients if asked.
Official text
The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu
Text as of 28 October 2026.
This is reference material, not legal advice.
Related recitals
This list is under review.
Court of Justice judgments
Related (earlier law or other instruments)
- C-129/21, Proximus NV v Gegevensbeschermingsautoriteit
Judgment of 27 October 2022ECLI:EU:C:2022:833
Instrument: GDPR together with the ePrivacy Directive
Consent to appear in phone directories, given once, covers all directory publishers; a request to be removed is an erasure request, and the controller must inform other controllers it supplied.