GDPR Specialist Rights of Data Subjects

Question 1

What does the right of access under GDPR allow individuals to do?

Accepted Answer

Obtain confirmation and access to their personal data

Answer

The right of access, also known as a Subject Access Request (SAR), allows individuals to obtain confirmation from a data controller as to whether their personal data is being processed. If so, they have the right to access that data and receive comprehensive information about the processing activities.

Question 2

What is the right to rectification under GDPR?

Accepted Answer

The right to correct inaccurate data

Answer

The right to rectification grants individuals the power to have inaccurate personal data concerning them corrected without undue delay. If data is incomplete, they also have the right to have it completed, including by providing a supplementary statement, ensuring data accuracy.

Question 3

What does the right to be forgotten entail?

Accepted Answer

The right to delete their personal data

Answer

The right to be forgotten, or the right to erasure, allows individuals to request the deletion or removal of their personal data where there is no compelling reason for its continued processing. This right applies in specific circumstances, such as when data is no longer necessary for its original purpose or consent is withdrawn.

Question 4

Which right allows individuals to move their personal data between services?

Accepted Answer

Right to data portability

Answer

The right to data portability allows individuals to receive their personal data, which they have provided to a controller, in a structured, commonly used, and machine-readable format. It also gives them the right to transmit that data to another controller without hindrance, facilitating data mobility.

Question 5

What does the right to object allow individuals to do?

Accepted Answer

Object to specific processing of their data

Answer

The right to object allows individuals to object to the processing of their personal data in certain situations, particularly when the processing is based on legitimate interests or for direct marketing purposes. Upon objection, the controller must cease processing unless compelling legitimate grounds override the individual's interests.

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

(GDPR) Certified General Data Protection Regulation Specialist Practice Test

GDPR Specialist Rights of Data Subjects