If you rectify, erase or restrict data, you must tell each recipient you disclosed it to — unless that proves impossible or disproportionate.
Official text & source
Article 19 of the General Data Protection Regulation (Regulation (EU) 2016/679). Read the full, authoritative text on EUR-Lex.
Official text
Verbatim text of Article 19 of the General Data Protection Regulation — Regulation (EU) 2016/679.
1 The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16 , Article 17 (1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. 2 The controller shall inform the data subject about those recipients if the data subject requests it.
Source: Regulation (EU) 2016/679 (OJ L 119, 4.5.2016, p. 1). Official text reproduced from EUR-Lex — © European Union. Only European Union legislation published in the Official Journal is deemed authentic.
Related articles
These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.
Need to apply Article 19?
The FAQs and insights show how the text works in practice.