The GDPR awards a list of privacy rights to data subjects. These rights aim to give people more awareness and control over their data and how it's used. As an organization, it's essential to understand the nature and scope of these rights so you can stay compliant with the GDPR.
Data subjects have the right to be informed about the collection and use of their personal data. This creates a variety of obligations for organizations.
Data subjects have the right to access their personal data and information about how personal data is processed. A data subject can request a copy of the actual data being processed via a data subject request.
Data subjects have the right to have inaccurate or incomplete personal data rectified and completed.
Data subjects have the right to be forgotten was refined down to a more limited right of erasure in the GDPR.
Data subjects have the right to request the restriction or suppression of their personal data.
Data subjects have the right to object to how their information is used for marketing, sales, or non-service-related purposes.