Various GDPR provisions specify risk and damage categories, from which it can be derived which "rights and freedoms" it wants to protect, which risks it wants to avoid and which damage it wants to prevent.

Thus, it follows from Rec. 75 and 85 (1) GDPR that the GDPR also wants to prevent that data subjects are “deprived of their rights and freedoms” or that their right are limited.

There is much to suggest that withholding rights means the rights conferred on the data subject by the GDPR (in particular the data subject rights of Chapter III GDPR).