Data Protection for Individuals

A key aspect of the Regulations is that they empower Data Subjects, individuals whose data is being Processed, with specific rights, namely:

  • The right to access;
  • rectification;
  • erasure;
  • to object;
  • to restriction;
  • to data portability; and
  • automated individual decision-making, including profiling.

Data Subjects who wish to exercise their rights should contact the relevant firm directly. 

Individuals who believe a firm has breached the Regulations, including failing to fulfil a Data Subject rights request, can lodge a complaint directly with the Data Protection Office.

Data Subjects can find more information on their rights in Part 3 of the Data Protection Regulations & Rules 2021 Guidance, and a complaint form can be found in the Data Protection Resources page.