GDPR individuals’ rights
A right to receive clear and understandable information about who is processing your data, what data they are processing and why they are processing it. (Article 12-14)
A right to request access to the personal data an organisation has about you. (Article 15)
A right to request one service provider to transmit your personal data to another service provider, e.g. when switching from one to another internet social network, or switching to another cloud provider. (Article 20)
A right ‘to have your data erased’. You will be able to ask to delete your personal data if you no longer want it to be processed, and there is no legitimate reason for a company to keep it. For example, when you type your name into an online search engine, and the results include links to an old newspaper article about the debt you long paid, you will be able to ask the search engine to delete the links (unless you are a public figure or your interest in removing the article outweighs the general public’s interest in accessing the information). (Article 17)
A right to consent In cases when companies need your consent to process your data, they will have to ask you for it and clearly indicate what use will be made of your personal data. Your consent must be an unambiguous indication of your wishes and be provided by an affirmative action by you. So, organisations won’t be able to hide behind long legalistic terms and conditions. (Articles 4 (11) and 7)
A right be informed If your data is lost or stolen, and this data breach could harm you, the company causing the data breach will have to inform you (and the relevant data protection supervisory authority) without undue delay. If the company doesn’t do this, it can be fined. Recent attacks, such as WannaCry, Meltdown and Spectre, or the Uber case show how important this new right is. (Article 33-34)
Better protection of children online. Children may be less aware of the risks and consequences of sharing data and are less aware of their rights. This is why any information addressed specifically to a child will need to be adapted to be easily accessible, using clear and plain language. (Article 8)
