All individuals have rights regarding their personal data
All rights (except the right to information about processing) must be complied with promptly and within 20 working days of receipt. There is only ONE absolute right, the right to object to direct marketing; all others can be subject to limitations, re- strictions and exemptions.
Right to information about processing
Specific information must be provided to individuals at the time you collect their personal data directly from them or no later than one month after obtaining it from a third party. It is often referred to as a “privacy notice”.
Access to personal data
The right to be given a copy of their own personal data, and other information about how it is being processed.
The right to have inaccurate personal data corrected, or incomplete personal data completed.
Only applies in specified circumstances; it is not a “right to be forgotten” in most cases.
Restriction on processing
The right to request temporary or permanent restriction on processing in specific circumstances.
Right to object to processing
Individuals can object to direct marketing (the only absolute right) and to other processing in certain circumstances
Right to data portability
in strictly defined cases, individuals can ask for a copy of personal data in a commonly used machine-readable format or for that personal data to be transferred to another controller, if technically possible.
Rights in respect of automated decisions and profiling
Individuals can object to decisions (including profiling) which produce legal, or other effects on them, being made solely by automated processing.
Get in touch to discuss how we can help you with data protection compliance, or pop in for a chat at our offices at 16 Peel Road, Douglas on Monday 29 January between 10:30 - 12:00.