Article 19 of GDPR: Notification obligation
Based on Article 19 of GDPR, a company has an obligation to inform recipients of personal data or other companies to whom they’ve shared personal data:
- When they rectify personal data
- When they erase personal data
- When they restrict personal data
The idea is that those other recipient organizations take the necessary step to rectify, erase or restrict the processing of personal data as well.
Companies may be discharged from this obligation if the notification task proves to be impossible or involves a disproportionate amount of effort.
If the individual cares to know who are the other recipient organizations, companies have a duty to provide this information.
Recitals applicable to Article 19 of GDPR
Relevant Recitals: 66
GDPR Regulation article-by-article overview
Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.
Cited Legislation in Article 19 or relevant recitals
GDPR Text: Article 19 of GDPR and Relevant Recitals
GDPR Text Source: EUR-Lex
Official GDPR Text: General Data Protection Regulation
Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJL 127, 23.5.2018, p. 2 ((EU) 2016/679)