The General Data Protection Regulation (GDPR) is a legal framework that sets guidelines for the collection and processing of personal information from individuals who live in the European Union (EU).

The GDPR provides the following rights for individuals:

  1. information about the processing of your personal data.

  2. obtain access to the personal data held about you.

  3. ask for incorrect, inaccurate, or incomplete personal data to be corrected.

  4. request that personal data be erased when it is no longer needed or if processing it is unlawful.

  5. object to the processing of your personal data for marketing purposes or on grounds relating to your situation.

  6. request the restriction of the processing of your personal data in specific cases

  7. receive your personal data in a machine-readable format and send it to another controller (‘data portability’)

  8. request that decisions based on automated processing concerning you or significantly affecting you and based on your personal data are made by natural persons, not only by computers. You also have the right in this case to express your point of view and to contest the decision.


Last modified: Thursday, 31 March 2022, 12:00 AM