Which rights do individuals have under the GDPR?
There are 8 fundamental rights for a data subject under the GDPR. These are:
- The right for information – organizations need to be completely transparent about the way they process personal data.
- The right of access – Data subjects have the right to know which data about them is kept and how this data is processed.
- The right to rectification – Data subjects have the right to have their personal data changed if this data is wrong or incomplete.
- The right to be forgotten – This is the right to have personal data deleted without needing to give a particular reason.
- The right to restriction of processing – This is the right to block or limit the processing of personal data.
- The right on portability of data – This right makes it possible for a data subject to obtain his personal data and to transfer this information to another data controller.
- The right to objection – In certain circumstances the data subjects have the right to object the processing of their personal data, for example when personal data is processed for direct marketing.
- The right to object to automated decision-making – The GDPR has set up certain mechanisms to protect data subjects against the risk that potential negative decisions are made without human intervention.