Rights of Individuals regarding their own Information and Data

Question 1

What are the rights of access (‘right to ask’) relating to an individual’s info and data under the GDPR?

Answer 1

Individuals can ask an organisation or business for copies of their personal data being held.
This is known as a subject access request (SAR)

Question 2

What is a Subject Access Request (SAR)?

Answer 2

The right to ask a business for your personal data.

Question 3

What are the rights to rectification relating to an individual’s info and data under the GDPR?

Answer 3

Individuals can request inaccurate data is corrected by an organisation of business, if incomplete, ask for additional detail to be added

Question 4

What are the rights to erasure (‘right to be forgotten’) relating to an individual’s info and data under the GDPR?

Answer 4

An individual can ask an organisation or business that holds their personal data to be deleted

Question 5

What are the rights to object relating to an individual’s info and data under the GDPR?

Answer 5

In certain circumstances, an individual can ask an organisation or business not to precess, or to stop processing their personal data.

Question 6

What are the rights to be informed relating to an individual’s info and data under the GDPR?

Answer 6

An individual must be informed if an orgnaisation or business is using their personal data.

Question 7

What are the rights to restriction relating to an individual’s info and data under the GDPR?

Answer 7

An individual can ask an organisation or business to restrict the use of their personal data or not to delete it.

Question 8

What are the rights to data portability relating to an individual’s info and data under the GDPR?

Answer 8

An individual can ask an orgnaisation or business to transfer their personal data to another organisation or business, or to provide a copy to the personal data in a format that is accessible.

Question 9

What is the Information Commissioners Office (ICO)?

Answer 9

The ICO is a body set up by the uk government, they can investigate claims, and take action aginst anyone who has misused personal data.

Question 10

What are the consequences for the business if they do not handle data properly?

Answer 10

• Financial (e.g. fines)
• Legal
• Repuational
• Loss of business opportunities.