Individuals have a range of rights under data protection law, which aim to give them some control over use of their data, and to stop unlawful or unnecessary processing. Organisations must facilitate the exercise of rights and take action when receiving requests from data subjects. It is important for organisations to understand the parameters of the rights, and what steps to take when a request is received.
This training session looks at the detail of rights (other than the right of access) under the UK GDPR, as amended by the Data (Use and Access) Act 2025. The session covers:
- general rules for the exercise of rights
- how to manage requests from individuals
- right to information
- rights to rectification, erasure and restriction
- right to data portability
- right to object to processing
- rules relating to automated individual decision-making
- exemptions to the rights
For training on Subject Access Requests, please see the course Handling Subject Access Requests.
Delegates attending this session should have a basic knowledge of current data protection legal requirements in order to be able to understand the material in this session. Delegates with little no existing knowledge are strongly encouraged to attend Data Protection Essential Knowledge Level 1 before attending this training course.
"I really liked the structure of the eLearning course and how it was presented."