With the increase in the processing of personal data on the one hand and the value of this data on the other hand, the need for legal protection of the information privacy and personal data is felt more. Such protection is enshrined in the European Union General Data Protection Regulation (GDPR). According to this regulation, the data subjects have different rights. In contrast, controllers and processors are required to perform a variety of tasks. The European regulation also specifies various other aspects in order to fully protect personal data. Irrespective of the protectionist approach of this regulation, according to the GDPR wording, the right to personal data is not absolute and in contrast to other rights and purposes such as fundamental rights and freedoms, the right to freedom of expression and information and processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes may be limited. In this study, by explaining these rights and purposes under the heading of different aspects of restricting personal data protection, it became clear how the rights of data subjects in the European Union are restricted. Then the existence of this issue in the Iranian legal system was considered. In this regard, it was found that the various aspects of the restriction on the protection of personal data, based on various articles of Iranian law, the principles of Iranian law, especially Imami jurisprudence in general can be applied; However, a detailed explanation and clarification of the details of the factors restricting the protection of the rights of the data subject is subject to the clarification of the legislator.