UK GDPR Compliance

Data subjects have the right to get their inaccurate personal data corrected by the data controller without delay. They can also ask for their incomplete personal data to be completed by adding more information.

Data subjects can ask the data controllers to delete their personal data without undue delay. Data controllers must comply with the erasure request if the data is no longer needed for its original purpose. They must also delete it if consent is withdrawn and no other legal basis for processing exists. Erasure is required if the data subject objects to the processing, unless compelling reasons for processing exist. Unlawfully processed personal data must also be erased. Finally, personal data must be deleted if a domestic legal obligation requires it.

Data subjects can demand data processing restriction when there is a dispute as to the data's accuracy while the data controller verifies the accuracy. It also applies if processing is unlawful, but they prefer restriction over erasure. Furthermore, restriction can be requested if the data controller no longer needs the data, but the individual requires it for legal claims. Finally, it applies if they have objected to processing, pending verification of the data controller's legitimate grounds.

Data subjects have the right to receive their personal data that they provided to the data controller in a structured, machine-readable format and transfer it to another data controller without hindrance. It applies only when the processing is based on consent or a contract and carried out by automated means.

Data subjects have the right to object, at any time, to personal data processing, including profiling, if it is based on public interest or legitimate interests. Data controllers must then cease processing unless they demonstrate compelling legitimate grounds that override the data subject's interests, rights, and freedoms, or for legal claims.