Data Subject Right Service
Under the General Data Protection Regulation [‘GDPR’] individuals known as ‘data subjects’ have rights.
- A right to be informed about how their personal data is used -usually given by the provision of a privacy notice
- A right of access to their personal data and to ‘supplementary’ information – these are the most common requests.
- A right to rectify inaccurate information
- A right to have personal data erased or destroyed
- A right to restrict what happens with their personal data
- A right to be notified
- A right of portability
- A right to object to the processing of their personal data
- A right to object to marketing
- Rights in respect of automated decision making
- A right to be notified if there has been a personal data breach involving their data
The GDPR sets out when an organisation should provide information to an individual and how the information should be provided. It also sets out the circumstances when an individual can seek to exercise a right, the timescales within which a request should be dealt with, whether a charge can be made and when a request can be turned down – in whole or in part.
If you are not used to dealing with these requests they can be difficult to deal with. DPA/OK can support to you in dealing with a request or deal with the request on your behalf.