Data subject rights

Data subject rights

The UK General Data Protection Regulation (UK GDPR), Assimilated Regulation (EU) 2016/679 provides for enhanced rights for data subjects including providing rights of access, rectification, erasure and restriction of processing, data portability, a right to object to processing and rights relating to automated decision making, including profiling, with strict time limits for complying.

Right of access

Data subject access requests (also called DSARs) are relatively common and are seen as the gateway right, enabling data subjects to exercise other rights such as the right to rectification or erasure. They can be particularly onerous for businesses.

Article 15 of the UK GDPR entitles data subjects to:

•
confirmation of whether their personal data is being processed
•
access to the personal data that is being processed
•
receive additional information, broadly commensurate with the information required to be provided in your privacy notice
•
a copy of the personal data in question

The UK GDPR sets out mandatory categories of information which must be supplied in connection with a data subject access request. See Practice Note: Data subject rights—access—Information requirements.

To view the latest version of this document and thousands of others like it, sign-in with LexisNexis or register for a free trial.

TAKE A FREE TRIAL

Latest Risk & Compliance News

From Russia with love? UK lawyers mull sanctions U-turn

Law360, London: Finance companies are enlisting white-collar lawyers to draw up plans for tapping back into Russia if the US breaks with its Western allies and eases sanctions, although experts warn that unpredictable political winds mean there are as many risks as opportunities.

UK needs modern sanctions rules, ex-Lord Chancellor warns

Law360, London: The UK's sanctions regime is increasingly unfit for purpose and must reform to tackle new complex forms of aggression, such as cyberattacks and economic sabotage, the former Lord Chancellor urged on 5 June 2025.

UK Data (Use and Access) Bill facing collapse risk over Parliament’s AI copyright challenge

MLex: The UK’s Data (Use and Access) Bill faces increasing risk of collapse after the House of Lords again pushed forward an amendment to include in it protections for rights holders over their works being scraped for AI training. The House of Lords lawmaker who brought the amendment, which calls on the government to bring dedicated draft legislation on the issue, said their intent was not to kill the Bill but to push the government to respond by proposing its own amendment.

Lloyd's broker faces 2027 trial over US$3m bribery scheme

Law360, London: A Lloyd's of London broker is scheduled to stand trial in 2027 over allegations it failed to prevent its associates in the US from bribing an Ecuadorian official in exchange for lucrative reinsurance contracts worth US$38m.

View Risk & Compliance by content type :

News