European Data Protection Law and Regulation - Data Subject Rights

4 important questions on European Data Protection Law and Regulation - Data Subject Rights

What are the data subject rights?

  • Articles 12-14: Right of transparent communication and information
  • Article 15: Right of access
  • Article 16: Right to rectification
  • Article 17: Right to erasure ('right to be forgotten')
  • Article 18: Right to restriction of processing
  • Article 19: Obligation to notify recipients
  • Article 20: Right to data portability
  • Article 21: Right to object
  • Article 22: Right not to be subject to automated decision-making (profiling)

When can a data subject request his/her data to be given?

  1. Processing is based on consent or contract
  2. Processing is automated
  3. It does not adversely affect the rights and freedoms of others

When can an individual object to data processing?

  1. Legal ground is: Legitimate interest
  2. Marketing purposes
  3. Use of information society services
  4. Scientific or historical purposes
  • Higher grades + faster learning
  • Never study anything twice
  • 100% sure, 100% understanding
Discover Study Smart

When does the right to object against automated decision-making not apply?


  1. Based on a contract
  2. Consent
  3. Legal implications by member state

The question on the page originate from the summary of the following study material:

  • A unique study and practice tool
  • Never study anything twice again
  • Get the grades you hope for
  • 100% sure, 100% understanding
Remember faster, study better. Scientifically proven.
Trustpilot Logo