Data Subject Rights

Under GDPR, individuals — the data subjects — have a set of enforceable rights over their personal data. These rights apply regardless of how the data was collected or where it is stored. As an employee, you may be the first person to receive one of these requests, so knowing what they are and how to handle them is essential. The most commonly exercised rights are: the right of access, the right to rectification, the right to erasure, the right to data portability, the right to object, and the right to restriction of processing.