Data subject rights
The GDPR grants individuals a set of rights to safeguard their personal data and ensure transparent data processing. These include the rights to be informed, to access data, to ask for rectification, to request erasure of data (‘right to be forgotten’), to restrict processing, to object to certain uses, to seek portability of data, and not to be subject to a decision based solely on automated processing.
Organisations are obliged to promptly respond to such requests and facilitate the exercise of individual rights, establishing clear procedures.
Guidance
Statement 2/2025 on the implementation of the PNR Directive in light of CJEU Judgment C-817/19
Statement
#Data subject rights
#Law enforcement
Read more about
Statement 2/2025 on the implementation of the PNR Directive in light of CJEU Judgment C-817/19
Guidelines 01/2022 on data subject rights - Right of access
Guideline
#Data subject rights
Read more about
Guidelines 01/2022 on data subject rights - Right of access
Enforcement
Binding decision 1/2021 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding WhatsApp Ireland under Article 65(1)(a) GDPR
EDPB Binding Decisions
#Data subject rights
#Basic principles
#GDPR enforcement
#Fines
#Cooperation between authorities
#Anonymisation/pseudonymisation
Read more about
Binding decision 1/2021 on the dispute arisen on the draft decision of the Irish Supervisory Authority regarding WhatsApp Ireland under Article 65(1)(a) GDPR
Policy work
EDPB letter to the European Commission on the privacy implications of recent proposed legislative changes regarding entry conditions to the United States for EEA citizens
Reports, statements, and letters
#Law enforcement
#Data subject rights
#Biometrics
#Adequacy decision
#Tools for transfers and derogations
#International cooperation
Read more about
EDPB letter to the European Commission on the privacy implications of recent proposed legislative changes regarding entry conditions to the United States for EEA citizens
Statement 5/2024 on the Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement
Reports, statements, and letters
#Data subject rights
#Law enforcement
Read more about
Statement 5/2024 on the Recommendations of the High-Level Group on Access to Data for Effective Law Enforcement
Enforcement support
Coordinated Enforcement Action, implementation of the right of access by controllers
Coordinated Enforcement Framework
#Data subject rights
#GDPR enforcement
#Cooperation between authorities
Read more about
Coordinated Enforcement Action, implementation of the right of access by controllers
One-Stop-Shop case digest on right of access
Support Pool of Experts
#Data subject rights
#GDPR enforcement
#Cooperation between authorities
Read more about
One-Stop-Shop case digest on right of access
Compliance instruments
Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject
Opinion of the Board (Art. 64)
#Data subject rights
#Fines
Read more about
Opinion 39/2021 on whether Article 58(2)(g) GDPR could serve as a legal basis for a supervisory authority to order ex officio the erasure of personal data, in a situation where such request was not submitted by the data subject