Three data subjects' rights of the GDPR contain exemptions in favour of the person asserting legal claims:

Art. 17 III e: “Paragraphs 1 and 2 [right to erasure] shall not apply to the extent that processing is necessary for the establishment, exercise or defence of legal claims.”

 

Art. 18 II: “Where processing has been restricted under paragraph 1, such personal data shall […] only be processed […] for the establishment, exercise or defence of legal claims […].”

 

Art. 21 I 2: “The controller shall no longer process the personal data unless […] for the establishment, exercise or defence of legal claims.”