Through the Data Protection Act of 2018, an individual has the right to find out what information the government and other organisations store about them. 

This includes the right to: 

• Have incorrect data updated
• Have data erased
• Stop or restrict the processing of their data
• Data portability (allowing the person to get and reuse their data for different service)
• Be informed about how their data is being used  
• Access personal data
• Object to how data is processed in certain circumstances

Have you ever downloaded an application for your mobile to find out that you have to sign a term of service? 

Well, this is GDPR. Companies need your consent to access third-party data - pretty much anything that requires your data will ask you to consent to give them access to personal data.

An individual also has extra rights when an organisation is using personal data for automated decision-making, and profiling (without human involvement) such as an online decision to award a loan.

Solely automated individual decision-making (including profiling) - with legal effects is restricted, but can be carried out in particular circumstances.

It can only be carried out if the decision is: 

• Authorised by law (such as for tax fraud)
• Based on the individual’s explicit consent
• Necessary for entering into (or for the performance of) a contract between an organisation and an individual