In short
Data subject rights are individuals' rights over their personal data under privacy laws. Under the General Data Protection Regulation (GDPR) they include access, correction, erasure, restriction, portability and objection.
Key takeaways
- Requests under that regulation must generally be answered within one month, extendable by two months for complex cases.
- California law gives consumers similar rights to know, delete, correct and opt out of the sale or sharing of their data.
- Organizations need to verify the requester's identity and know where the data is stored.
Where it's tested
ISC: Privacy & Regulatory Frameworks — study notes, a five-minute revision sheet and practice questions.
Practise: 3 questions
Question 1 of 3 · 0 answered
A customer asks a company to delete all of her personal data because it is no longer needed for the purpose it was collected for. Under the General Data Protection Regulation, this is the right to: