General Data Protection Regulation (GDPR)

  1. Rights of the Data Subject
    1. Right to be Informed
      1. Information When Data Collected Directly
        1. Identity of Controller
          1. Contact Details of DPO
            1. Purposes of Processing
              1. Legitimate Interests
                1. Recipients of Data
                  1. International Transfers
                    1. Retention Periods
                      1. Data Subject Rights
                        1. Right to Lodge Complaint
                          1. Automated Decision-Making
                            1. Source of Data
                              1. Timing and Method of Provision
                              2. Information When Data Not Obtained Directly
                                1. Additional Information Requirements
                                  1. Categories of Personal Data
                                    1. Source of Data
                                      1. Exceptions to the Obligation
                                        1. Disproportionate Effort
                                          1. Professional Secrecy
                                      2. Right of Access
                                        1. Confirmation of Processing
                                          1. Whether Processing is Taking Place
                                            1. Basic Processing Information
                                            2. Access to Personal Data and Supplementary Information
                                              1. Copy of Personal Data
                                                1. Categories of Data Provided
                                                  1. Processing Purposes
                                                    1. Recipients
                                                      1. Retention Periods
                                                        1. Data Subject Rights
                                                          1. Source of Data
                                                            1. Automated Decision-Making
                                                              1. Safeguards for International Transfers
                                                                1. Format and Delivery of Information
                                                                  1. Electronic Format
                                                                    1. Secure Transmission
                                                                  2. Timeframes and Limitations
                                                                    1. One Month Response Time
                                                                      1. Extension Circumstances
                                                                        1. Fee Charging Conditions
                                                                          1. Manifestly Unfounded Requests
                                                                        2. Right to Rectification
                                                                          1. Correcting Inaccurate Data
                                                                            1. Verification Processes
                                                                              1. Supporting Evidence
                                                                              2. Completing Incomplete Data
                                                                                1. Supplementary Statements
                                                                                  1. Additional Information
                                                                                  2. Notification to Recipients
                                                                                    1. Third Party Notification
                                                                                      1. Impossibility or Disproportionate Effort
                                                                                    2. Right to Erasure
                                                                                      1. Grounds for Erasure
                                                                                        1. Data No Longer Necessary
                                                                                          1. Objection to Processing
                                                                                            1. Unlawful Processing
                                                                                              1. Child's Data
                                                                                              2. Exceptions to Erasure
                                                                                                1. Freedom of Expression and Information
                                                                                                  1. Public Health
                                                                                                    1. Archiving and Research
                                                                                                    2. Technical Implementation
                                                                                                      1. Secure Deletion Methods
                                                                                                        1. Backup System Considerations
                                                                                                        2. Notification Obligations
                                                                                                          1. Third Party Recipients
                                                                                                            1. Public Disclosure Cases
                                                                                                          2. Right to Restrict Processing
                                                                                                            1. Circumstances for Restriction
                                                                                                              1. Accuracy Disputes
                                                                                                                1. Unlawful Processing
                                                                                                                  1. Data No Longer Needed
                                                                                                                    1. Objection Pending
                                                                                                                    2. Effects of Restriction
                                                                                                                      1. Storage Only
                                                                                                                        1. Limited Processing Exceptions
                                                                                                                        2. Lifting Restrictions
                                                                                                                          1. Resolution of Issues
                                                                                                                        3. Right to Data Portability
                                                                                                                          1. Scope and Limitations
                                                                                                                            1. Automated Processing
                                                                                                                              1. Personal Data Only
                                                                                                                              2. Format and Transmission of Data
                                                                                                                                1. Structured Format
                                                                                                                                  1. Machine-Readable Format
                                                                                                                                    1. Commonly Used Format
                                                                                                                                      1. Direct Transmission
                                                                                                                                      2. Technical Feasibility
                                                                                                                                        1. System Compatibility
                                                                                                                                          1. Security Considerations
                                                                                                                                        2. Right to Object
                                                                                                                                          1. Objecting to Legitimate Interests Processing
                                                                                                                                            1. Particular Situation Requirement
                                                                                                                                              1. Compelling Legitimate Grounds
                                                                                                                                              2. Objecting to Public Task Processing
                                                                                                                                                1. Particular Situation Requirement
                                                                                                                                                  1. Public Interest Assessment
                                                                                                                                                  2. Absolute Right to Object to Direct Marketing
                                                                                                                                                    1. Marketing Communications
                                                                                                                                                      1. Profiling for Marketing
                                                                                                                                                      2. Objecting to Research Processing
                                                                                                                                                        1. Public Interest Research
                                                                                                                                                          1. Statistical Purposes
                                                                                                                                                          2. Handling Objections
                                                                                                                                                            1. Cessation of Processing
                                                                                                                                                              1. Demonstration of Compelling Grounds

                                                                                                                                                          Previous

                                                                                                                                                          3. Lawful Bases for Processing

                                                                                                                                                          Go to top

                                                                                                                                                          Next

                                                                                                                                                          5. Obligations of Controllers and Processors