Data Subject Right Service
Under the GDPR individuals known as ‘data subjects’ have rights.
These are a:
- right to be informed about how their personal data is used -usually given by the provision of a privacy notice
- right of access to their personal data and to ‘supplementary’ information
- right to rectify inaccurate information
- right to have personal data erased or destroyed
- right to restrict what happens with their personal data
- right to be notified
- right of portability
- right to object to the processing of their personal data
- right to object to marketing
- right to be notified if there has been a personal data breach involving their data
- They also have rights in respect of automated decision making
The GDPR sets out when an organisation should provide information to an individual and how the information should be provided. It also sets out the circumstances when an individual can seek to exercise a right, the timescales within which a request should be dealt with, whether a charge can be made and when a request can be turned down – in whole or in part.
If you are not used to dealing with these requests they can be difficult to deal with. DPA/OK can support to you in dealing with a request or deal with the request on your behalf.