Individuals' rights
Individuals’ data protection rights are revamped by the GDPR.
For example, as an individual your right to access your personal data through a “Subject Access Request” is altered so that personal data must, in general, be provided without charge and within a shorter timeframe of one month.
Practical steps to take now
- Review internal processes for complying with these rights.
- Ensure standard responses to subject access requests inform individuals about their other rights and provide the other necessary information.
- Check the ease with which data can be easily accessed, exported and/or restricted if relevant requests are received.
- Download a summary of an individuals’ rights under the GDPR follow the practical steps.