Your Rights

Your Rights section header image - decorative, no link

The rights of individuals are the core of the GDPR. Most of your data protection rights are listed and explained in Chapter 3 of the GDPR. There are also some other rights you have which are located elsewhere in the GDPR.

You have a right to information about who is processing your data and for what purposes, who they’re sharing your data with, whether they’re processing it outside the European Economic Area, and much more.

You have a right of access to any personal data concerning you.

The right to information and the right of access are key rights, because in many situations they have to be used to unlock your other rights. If you don’t know that your personal data is being processed, and for what purposes, and if you can’t access that personal data to check if it is accurate and being processed lawfully and fairly then you can’t utilise your other rights.

If any of the personal data being processed is incorrect or inaccurate you have a right to rectification – the data controller has to fix any errors. In certain circumstances you have a right to erasure and a right to restrict processing.

You have a right to object to processing of your personal data depending on the lawful basis the data controller is using. You have the right to object to the processing of your personal data for direct marketing purposes at any time.

If the data controller is processing your personal data with your consent, you have the right to withdraw your consent at any time.

You have the right not to be subject to automated decision-making without human intervention, sometimes referred to as the ‘right to an explanation’.

You’ve a right to contact the Data Protection Officer if the data controller has one.

You have the right to data portability. This means you have a right to have your data moved from one service to another.

You have the right to lodge a complaint with the Data Protection Commission, or another data protection authority in the country in which the data controller has its main establishment.

Independent of your right to complain to supervisory authorities and any sanctions they may apply as a result of your complaint, you also have the right to an effective judicial remedy i.e. you can take a data controller or processor to court to seek compensation for harm they have caused you.

So following on from this you have a right to receive compensation if you have suffered material or non-material damage as a result of an infringement of the GDPR.

All articles in this section


Data Protection Fundamentals (basics, definitions and more …)
Your Rights (all your data protection rights: access, information, rectification and more …)
In More Detail (explorations and explanations of data protection concepts …)
Keeping Track (tracking Subject Access Requests and complaints to Supervisory Authorities …)