GDPR · pillar 3 of 6
The rights of the data subject
Each right has a deadline, a scope, and exceptions that are narrower than people expect.
- 7 One month, extendable by two A request must be answered without undue delay and within one month of receipt. It can be extended by two further…
- 8 Access is a copy plus eight things A subject access request obliges you to provide a copy of the personal data and, with it, the purposes, the categories…
- 9 Erasure is conditional The right to erasure applies on specific grounds — the data is no longer necessary, consent is withdrawn and there is…
Start this pillar See the whole map
Read against Regulation (EU) 2016/679 (GDPR), Court of Justice of the EU, Case C-311/18 (Schrems II), 16 July 2020 on . Regulations and frameworks change; the date is there so you can tell whether this has kept up.