Your rights

The GDPR includes eight individual rights:

• The right to be informed.

• The right of access.

• The right to rectification.

• The right to erasure.

• The right to restrict processing.

• The right to data portability.

• The right to object.

• Rights in relation to automated decision-making and profiling.

In certain circumstances, you have a right to have your personal data erased – this is also called ‘the right to be forgotten’. You can make a request for erasure verbally or in writing, and the relevant organisation has one month to respond to this kind of request.