Data Subject Rights Guidance Notes

These Data Subject Rights Guidance Notes explain the main rights available to individuals under the UK GDPR and the Data Protection Act 2018, and how those rights operate in practice. They are designed to help organisations understand when each right applies, what steps may be needed to comply, and the timescales that may apply.

The notes cover the full range of core data subject rights and give detailed guidance on both the scope of each right and the practical issues that can arise when responding to requests.

What these guidance notes cover

The guidance addresses:

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to data portability;
• the right to object; and
• rights related to automated decision-making, including profiling.

Practical guidance on applying data subject rights

For each right, these notes explain when it applies, when it may not apply, and what compliance may involve. They also cover the relevant time limits and other key points organisations should take into account when handling requests from data subjects.

If you also want a user-facing document explaining these rights in clearer operational terms, see the Data Subject Rights Policy.

Data Subject Rights Guidance Notes is part of Business . Just £38.50 + VAT provides unlimited downloads from Business for 1 year.