15 years: Data privacy & GDPR
GDPR refers to individuals as data subjects, these are also referred to as Data Subject Access Rights or Data Subject Rights. In this video, Punit explains the different rights that are available to an individual such as our customers or employees, whose personal data is being processed and the common requirements associated with them.
GDPR refers to individuals as data subjects, these are also referred to as Data Subject Access Rights or Data Subject Rights. In this video, Punit explains the different rights that are available to an individual such as our customers or employees, whose personal data is being processed and the common requirements associated with them.
Finance Unlocked is the video learning platform built for finance professionals.
This content is also available as part of a premium, accredited video course. Sign up for a 14-day trial to watch for free.
13 mins 10 secs
Data protection laws provide individuals with rights that they can exercise. The organisations need to put in place processes to respond to an individual’s exercise of rights. They must ensure to keep a record of rights requests that they have responded to.
Key learning objectives:
Outline the different rights under the GDPR that are available to individuals
Outline some common aspects across the rights
This content is also available as part of a premium, accredited video course. Sign up for a 14-day trial to watch for free.
1. Right to Be Informed:
This provides individuals with the right to know all information about their personal data. This is usually implemented in a layered approach and the first layer of informing an individual is the privacy statement.
2. Right to Access:
It provides the individuals with the right to obtain a copy of their personal data, as well as other supplementary information. When this right is exercised, the organisation should provide the individual with the following data:
3. Right to rectification:
It allows individuals to have their personal data corrected. It is useful for a person who has just moved to a new address and wants to have their records updated with a company.
4. The Right to be forgotten:
It is also known as the right to deletion or right to erasure, providing individuals with the ability to have the right to have personal data erased. It is available to an individual when personal data is illegally stored or personal data is no longer necessary for the purpose for which it has been obtained and there is no legal justification for it to be retained.
5. The Right to object:
It provides individuals with the right to object to the processing of their personal data at any time. A typical usage of this right would be when a client regards a company’s processing of their personal data based on legitimate interest to be unfair.
6. The Right to restrict processing:
It provides individuals with the right to ask for restriction of processing when one of the following conditions apply:
7. The Right not to be subjected to automated decision making:
This right gives individuals the ability to ask for a manual review if a decision is solely based on automated means and has an impact on the individual.
8. The Right of portability:
This right gives individuals the ability to have their personal data transferred to another controller or receive it back in machine readable format.
This content is also available as part of a premium, accredited video course. Sign up for a 14-day trial to watch for free.