There are 8 fundamental rights of individuals under the GDPR. These are:
- the Right to be Informed – Organisations must be completely transparent on how they’re using Personal Data.
- the Right of Access – Individuals have the right to know exactly what information is held about them and how it’s processed.
- the Right of Rectification – Individuals are entitled to have Personal Data rectified, if it’s inaccurate or incomplete.
- the Right to Erasure – Also known as ‘the right to be forgotten’. This refers to an individual’s right to have their Personal Data deleted, or removed, without having to give a reason.
- the Right to Restrict Processing – This refers to an individual’s right to block or suppress the Processing of their Personal Data.
- the Right to Data Portability – This allows individuals to retain and reuse their Personal Data for their own purposes.
- the Right to Object – In certain circumstances, individuals can object to their Personal Data being used. This includes, if an organisation uses Personal Data for the purpose of direct marketing, scientific and historical research, or for the performance of a task in the public interest.
- Automated Decision Making and Profiling – The GDPR has safeguards to protect individuals against the risk that a potentially damaging decision is made without human intervention. For example, individuals can choose not to be the subject of a decision where the consequence has a legal bearing on them, or is based on automated Processing.
Where can I find out more information about what Rights individuals have under the GDPR?
The Jaz'ing Up GDPR! book covers what Rights individuals have under the GDPR in more detail in a fun and easy to understand way without all of the bureaucratic legalise that is common in all other books and discussions about the GDPR.
The book is full of cartoons and call outs to make it easier to grasp what GDPR is all about and is split into 3 main sections.
- GDPR Nuts and Bolts explains everything you need to know about the GDPR and what Rights individuals have under the GDPR.
- Staff Toolbox that is designed for staff who work with personal data and need to get a grounding on the subject.
- Your Rights as a Data Subject is written from the point of view of the individual person who is affected by the GDPR so that they know there rights and the types of things they will be asking for.