GDPR & the Rights of EU Data Subjects

Here is a fairly detailed, though not exhaustive desc ription of the rights of data subjects under the GDPR.

Data subjects have the right:

• To be informed - data subjects have the right to know what private information of theirs the data controller/processor possesses.
• To access - data subjects have the right to view this information.
• To correct - data subjects have the right to rectify and update this information.
• To erase - data subjects have the right to be forgotten (subject to other regulatory requirements).
• To restrict processing - data subjects have the right to determine and limit the way that organizations can use their information.
• To portability - data subjects can specify when and how their information can be shared with other organizations.
• To object - data subjects have a mechanism to appeal how their private information is being captured, retained and processed, and to seek redress for demonstrable mishandling of their private information.
• To understand and determine level of consent - data subjects must clearly consent to the use of their private information with regard to profiling and the analytical use of their private information.