3. Instead of erasure, the controller shall restrict processing where:
|
(a)
|
the accuracy of the personal data is contested by the data subject and their accuracy or inaccuracy cannot be ascertained; or
|
|
(b)
|
the personal data must be maintained for the purposes of evidence.
|
Where processing is restricted pursuant to point (a) of the first subparagraph, the controller shall inform the data subject before lifting the restriction of processing.
Restricted data shall be processed only for the purpose that prevented their erasure.