Rights of data subjects under the GDPR
Rights of data subjects under the GDPR

The following Dispute Resolution guidance note provides comprehensive and up to date legal information covering:

  • Rights of data subjects under the GDPR
  • Key resources and guidance
  • Transparency obligations under the GDPR
  • Responding to data subject requests
  • Right to be informed (Articles 13 and 14)
  • Right of access (Article 15)
  • Right of rectification (Article 16)
  • Right to erasure (Article 17)
  • Right to restrict processing (Article 18)
  • Right to data portability (Article 20)
  • more

Brexit: On 31 January 2020, the UK ceased to be an EU Member State and entered an implementation period, during which it continues to be subject to EU law. During this period, the GDPR applies in the UK and the UK generally continues to be treated as an EU (and EEA) state for EEA and UK data protection law purposes. Any references to EEA or EU states in this Practice Note should therefore be read to also include the UK until the end of the implementation period. For further guidance on that period, its duration and the data protection laws that are anticipated to apply after the end of it, see Practice Note: Brexit—implications for data protection.

This Practice Note explores each of the rights provided to individuals, known as data subjects, which are set out in Chapter 3 of the General Data Protection Regulation (the GDPR), Regulation (EU) 2016/679.

The rights are:

  1. the right to be informed (Articles 13 and 14)

  2. the right of access (Article 15)

  3. the right of rectification (Article 16)

  4. the right to erasure, also known as the ‘right to be forgotten’ (Article 17)

  5. the right to restrict processing (Article 18)

  6. the right to data portability (Article 20)

  7. the right to object (Article 21)

  8. the right not to be subject to automated decision-making and profiling (Article 22)

All of