A data subject is classed as any natural living person.

What rights apply to data subjects?

Data subjects have the following rights.

  1. Information
  2. Access
  3. Rectification
  4. Erasure
  5. Restrictions on processing
  6. Data portability
  7. Objection
  8. Revision of automated decisions or profiling

What is a Subject Access Request?

This refers to a Data Subject exercising their rights under the GDPR. A Subject Access Request must be responded to within 30 Days. Companies need to have documented procedures in place detailing how they will respond to Subject Access Requests.