Mishcon de Reya
GDPR - What are your rights?
Nina O’Sullivan
Legal Director, Mishcon de Reya
I am Nina O’Sullivan, Legal Director at Mishcon de Reya.
GDPR, what are your rights? It’s important to understand your rights under GDPR when it comes to your own personal data. This will guide you in ensuring that you are adopting the right approach to personal processed by your organisation. Under GDPR, you have the right to be informed of processing of your personal data, this includes information about who is holding your personal data, the lawful basis for doing so, how the data will be used, and what your other rights are in relation to it. Individuals can also make a Subject Access Request or SAR which requires organisations to provide them with confirmation in writing within one month whether their data is being processed and, if so, to provide access to their personal data. Other rights for individuals include a right of rectification if your data is incomplete or inaccurate, a right to restrict processing, a right to object to processing based on legitimate interests and to online marketing, a new right of erasure, sometimes called the right to be forgotten in specific circumstances such as where the data is no longer necessary for the purpose or there is no legitimate reason to process it, a new right to data portability which allows individuals to obtain and re-use their personal data for their own purposes, and the right not to be subject to some decisions based on automated processing. GDPR may seem disruptive but it could strengthen relationships. How have you embraced the opportunities?
Mishcon de Reya
It’s business. But it’s personal.