GDPR Specialist Rights of Data Subjects 1 — Questions and Answers
Question 1: What does the right of access under GDPR allow individuals to do?
- Restrict all business operations
- Edit their own medical records
- Obtain confirmation and access to their personal data (Correct answer)
- Delete other people's data
Correct answer: Obtain confirmation and access to their personal data
The right of access, also known as a Subject Access Request (SAR), allows individuals to obtain confirmation from a data controller as to whether their personal data is being processed. If so, they have the right to access that data and receive comprehensive information about the processing activities.
Question 2: What is the right to rectification under GDPR?
- The right to erase company files
- The right to refuse data processing
- The right to correct inaccurate data (Correct answer)
- The right to publish data
Correct answer: The right to correct inaccurate data
The right to rectification grants individuals the power to have inaccurate personal data concerning them corrected without undue delay. If data is incomplete, they also have the right to have it completed, including by providing a supplementary statement, ensuring data accuracy.
Question 3: What does the right to be forgotten entail?
- The right to forget passwords
- The right to ignore consent
- The right to delete their personal data (Correct answer)
- The right to share all data
Correct answer: The right to delete their personal data
The right to be forgotten, or the right to erasure, allows individuals to request the deletion or removal of their personal data where there is no compelling reason for its continued processing. This right applies in specific circumstances, such as when data is no longer necessary for its original purpose or consent is withdrawn.
Question 4: Which right allows individuals to move their personal data between services?
- Right to object
- Right to data portability (Correct answer)
- Right to encryption
- Right to access only
Correct answer: Right to data portability
The right to data portability allows individuals to receive their personal data, which they have provided to a controller, in a structured, commonly used, and machine-readable format. It also gives them the right to transmit that data to another controller without hindrance, facilitating data mobility.
Question 5: What does the right to object allow individuals to do?
- Remove data from all servers
- Dispute government laws
- Object to specific processing of their data (Correct answer)
- Encrypt all web data
Correct answer: Object to specific processing of their data
The right to object allows individuals to object to the processing of their personal data in certain situations, particularly when the processing is based on legitimate interests or for direct marketing purposes. Upon objection, the controller must cease processing unless compelling legitimate grounds override the individual's interests.
Question 6: When can a data subject exercise the right to restrict processing?
- When data is accurate and verified
- When processing is authorized
- When data accuracy is disputed or processing is unlawful (Correct answer)
- After deletion of records
Correct answer: When data accuracy is disputed or processing is unlawful
The right to restrict processing can be exercised when an individual disputes the accuracy of their personal data, when the processing is unlawful, or when the controller no longer needs the data but the individual requires it for legal claims. This temporarily limits how an organization can use the data while the issue is resolved.
GDPR Specialist Rights of Data Subjects 1
What does the right of access under GDPR allow individuals to do?