GDPR

Knowledge Base | GDPR | What are the 8 GDPR rights?

What are the 8 GDPR rights?

GDPR rights are commonly grouped into eight main categories that help individuals understand and control how their personal data is used:

  1. Right to be informed: Receive clear information about how and why personal data is processed.

  2. Right of access: Obtain a copy of personal data and information about its use.

  3. Right to rectification: Have inaccurate information corrected and incomplete information completed.

  4. Right to erasure: Request deletion when the legal grounds for erasure apply.

  5. Right to restriction: Limit the use of personal data in specified circumstances.

  6. Right to data portability: Receive data provided to an organisation in a reusable format, where processing is automated and based on consent or a contract.

  7. Right to object: Oppose certain processing, with an unconditional right to stop the use of personal data for direct marketing.

  8. Rights concerning automated decisions: Protection against certain entirely automated decisions with legal or similarly significant effects.

These rights have different conditions and exceptions. Individuals also have related rights, including withdrawing consent and complaining to a supervisory authority.