4. The rights of individuals

The GDPR has strengthened the rights of the individual whose personal data is processed (the data subject). Those rights are contained in Articles 12 to 24 and Article 34 of the GDPR. They include the right to be given certain information by the data controller, as outlined in the previous chapter, as well as the right to access by the individual (known under the DPA as a subject access request) and the new rights of rectification, erasure (the right to be forgotten), restricted processing, data portability and the right to object. Individuals also have the right to be informed about personal data breaches where these present a high risk to an individual’s rights and freedoms.