The eight rights, at a glance

UK GDPR gives individuals eight rights over their own personal data:

• The right to be informed
• The right of access
• The right to rectification
• The right to erasure ("the right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object
• Rights related to automated decision-making and profiling

None of these rights is absolute, most come with conditions and exemptions, but organisations must have a process for recognising and responding to a rights request, usually within one calendar month.