What are the data subject rights under GDPR?
The GDPR grants certain rights to individuals concerning their personal data. These rights include:
- The right to be informed: Individuals have the right to be informed about the collection and processing of their personal data, including the purposes for which it will be used and who it will be shared with.
- The right of access: Individuals have the right to access their personal data and receive a copy of it.
- The right to rectification: Individuals have the right to request the correction of inaccurate or incomplete personal data.
- The right to erasure: Individuals have the right to request the deletion of their personal data in certain circumstances, such as if it is no longer necessary for the purpose for which it was collected.
- The right to restrict processing: Individuals have the right to request a restriction on the processing of their personal data in certain circumstances, such as if the data is inaccurate or the processing is unlawful.
- The right to data portability: Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
- The right to object: Individuals have the right to object to the processing of their personal data in certain circumstances, such as if the processing is based on legitimate interests or if it is for direct marketing purposes.
- Rights in relation to automated decision-making and profiling: Individuals have the right to object to decisions made solely by automated means, such as profiling, if they significantly affect them.