Individuals' rights Details

Domain

Summary

The policies, processes and technologies used within an organisation to detect alerts, events and warning which lead to an security incident.

Overview

Data protection law aims to empower individuals and give them greater control over their personal data through several rights, which you need to facilitate effectively. Compliance with individual rights minimises the privacy risks to individuals as well as to organisations. It will help you to comply with other data protection requirements, such as the principles. Good data protection compliance enhances your reputation and gives you a competitive edge because it increases the trust and confidence that people have in how you handle personal data.

Detailed Description

The GDPR provides the following rights for individuals:
1. The right to be informed covers some of the key transparency requirements of the GDPR. It is about providing individuals with clear and concise information about what you do with their personal data.
2. The right of access, commonly referred to as subject access, gives individuals the right to obtain a copy of their personal data as well as other supplementary information. It helps individuals to understand how and why you are using their data, and check you are doing it lawfully.
3. The right to rectification - Individuals have the right to have inaccurate personal data rectified. 
4. The right to erasure - Individuals have the right to have personal data erased. This is also known as the 'right to be forgotten'. The right is not absolute.
5. The right to restrict processing - Individuals have the right to restrict the processing of their personal data in certain circumstances. This means that an individual can limit the way that an organisation uses their data.
6. The right to data portability gives individuals the right to receive personal data they have provided to a controller in a structured, commonly used and machine readable format. It also gives them the right to request that a controller transmits this data directly to another controller.
7. The right to object gives individuals the right to object to the processing of their personal data.
8. Rights in relation to automated decision making and profiling - automated individual decision-making is a decision made by automated means without any human involvement.

Reference/Support Links

Governing bodies/Certifiers/Legislation Links