Data subject rights are the claims that anyone whose data a company processes can assert against it. These include the right to access the data and information about its processing, the right to correct inaccurate data, the right to erasure, the right to restriction of processing, the right to data portability to another provider, the right to object to processing based on legitimate interest, and the right to object to direct marketing. Requests are handled within the statutory deadline and free of charge. The practical problem is usually not legal but organisational: the company must know in which systems, files and tools a specific person's data is located, including backups and exports held by suppliers. Prepare a procedure and a list of systems in advance, not only when the first request arrives.
See also: Privacy policy, Consent to data processing, Digital Assets of a Company.
