Individuals' rights

Individuals’ data protection rights are revamped by the GDPR.

For example, as an individual your right to access your personal data through a “Subject Access Request” is altered so that personal data must, in general, be provided without charge and within a shorter timeframe of one month.

Practical steps to take now

  1. Review internal processes for complying with these rights.
  2. Ensure standard responses to subject access requests inform individuals about their other rights and provide the other necessary information.
  3. Check the ease with which data can be easily accessed, exported and/or restricted if relevant requests are received.
  4. Download a summary of an individuals’ rights under the GDPR follow the practical steps.

Main contacts