Data Subject Rights
Do data subjects have specific privacy rights that must be operationalized?

Last review date: 29 December 2023

Yes.  Data subjects have the following data privacy rights, although the specifics of the scope and conditions for each of these vary depending on the circumstances and local law:

☒   right to access the data subject's own personal data

☒   right to rectify/correct the data subject's own personal data where inaccurate or incomplete

☒   right to erasure of personal data

☒   right to restrict data processing

☒   right to data portability

☒   right to object to the processing of personal data

☒   right to withdraw consent

☒   other

CCPA offers e.g., data access, deletion, and portability rights to California residents as well as the right to opt-out of the sale of their personal data and from 1 January 2023, the right to correct personal information and to limit use of sensitive personal information. HIPAA offers access rights to patients.