The General Data Protection Regulation - a practical guide for trade unionists (March 2018)

Chapter 4

4. The rights of individuals

[ch 4: page 27]

The GDPR has strengthened the rights of the individual whose personal data is processed (the data subject). Those rights are contained in Articles 12 to 24 and Article 34 of the GDPR. They include the right to be given certain information by the data controller, as outlined in the previous chapter, as well as the right to access by the individual (known under the DPA as a subject access request) and the new rights of rectification, erasure (the right to be forgotten), restricted processing, data portability and the right to object. Individuals also have the right to be informed about personal data breaches where these present a high risk to an individual’s rights and freedoms.


This information is copyright to the Labour Research Department (LRD) and may not be reproduced without the permission of the LRD.