How should requests from individuals exercising their data protection rights be dealt with?

Rule, including deadlines, for responding for citizens’ request made under the EU’s data protection law.

What personal data and information can an individual access on request?

Type of data citizens can access on request and what they have to receive from your organisation under the EU data protection law.

Do we always have to delete personal data if a person asks?

Grounds on which an organisation can refuse, or not, to delete a citizen’s personal data under the EU’s data protection law.

What happens if someone objects to my company processing their personal data?

What to do if a citizen objects to you processing their data, for, for example, marketing purposes, under the EU data protection law.

Can individuals ask to have their data transferred to another organisation?

Grounds on which people can ask for their data to be moved from your organisation to another organisation under the EU data protection law.

Are there restrictions on the use of automated decision-making?

Grounds on which automated decision-making is permitted or not under EU data protection law.