The GDPR also defines a set of rights that every natural person has. This list is what makes the GDPR a good legislation. Everyone has the right to:
- Be informed about processing activities processing its personal data. The information must be transparent.
- Get access to any personal data being processed.
- Export any personal data that the person has provided to a portable format.
- Correct any erroneous data.
- Delete its data (or be forgotten).
This right is not absolute. It depends on the legal foundation of the processing activity. For activities based on consent, the right is absolute. For processing activities based on legitimate interest, all data that the controller does not have compelling reasons to maintain ...