Data subject rights
Under data protection legislation, individuals have a number of rights in respect of their personal data.
Data protection legislation provides a number of rights to data subjects with each right being applicable in certain circumstances or conditions. The rights are:
Subject access requests
For staff receiving a subject access request
Right to data portability
For staff receiving a data portability request
Right to be forgotten (right to erasure)
Individuals can request that their personal data is erased or destroyed. Also known as the “right to be forgotten”.
Right to object
Individuals have the right to object at any time to the use or storage of their personal data.
Right to rectification
If personal data is inaccurate, out of date, or incomplete, individuals have the right to correction, update or completion of that data.
Right to restrict processing
Individuals can request that the use or storage of their data is restricted in a manner of the individuals’ choosing.
Right to object to automated processing
Individuals have the right not to be subject to automated processing, including profiling.