Data Subject Rights
What is Data Subject Rights?
The legal rights granted to individuals regarding their personal data, including access, rectification, erasure, portability, and objection.
Terms that appear alongside data subject rights
Each of these is named in at least one of the same controls as data subject rights. The number is how many controls name both.
- data subject 209 shared controls
- gdpr 83 shared controls
- consent 68 shared controls
- automated decision making 45 shared controls
- data protection 40 shared controls
- lawful basis 37 shared controls
- right to object 33 shared controls
- data portability 32 shared controls
Frameworks that govern data subject rights
What the standards actually require on data subject rights
Requirements naming data subject rights across 6 standards, quoted from the control text.
Standard 6 per Sections 37-43 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in accordance with the rights of data subjects under this Act.
JM-DPA2020-Standard6-Subject-Rights-Sec37-43-Access-Correction-Erasure-Portability-Objection-Profiling-Restriction · Jamaica DPA 2020 Standard 6 - Data Subject Rights Enablement + Section 37-43 + Access Right + Correction Right + Erasure Right + Portability Right + Objection Right + Automated Decision-Making Restrictions + Profiling + Restriction Right →On request, at any time, the data subject may obtain from the controller: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or outdated data;
lgpd::Art.18 · Arts. 17, 18 and 21: Data subject rights and how requests are handled →Georgia DPL Data Subject Rights (Articles 21-26 - GDPR Chapter III aligned post-2023). RIGHTS: (1) RIGHT TO INFORMATION + TRANSPARENCY (Art. 21) - clear + accessible + at-collection notice; (2) RIGHT OF ACCESS (Art.
GeDPL-DataSubjectRights · Data Subject Rights (Access, Rectification, Erasure, Restriction, Portability, Objection, ADM) →Ghana DPA 2012 Data Subject Rights (Sec.30-38). RIGHTS: (1) RIGHT TO INFORMATION (Sec.30) - clear privacy notice + collection-time information;
GhDPA-DataSubjectRights · Data Subject Rights (Access, Rectification, Erasure, Objection, Portability) (Sec 30-38) →Section 26 of the Kenya DPA establishes comprehensive data subject rights closely modelled on EU GDPR. (1) Section 26 Seven Data Subject Rights: (a) Right to be Informed of use of personal data; (b) Right of Access - request access to personal data;
KE-DPA-Data-Subject-Rights-Sections26-Access-Correction-Erasure-Object-Portability-Restriction-30-Days · Kenya DPA Data Subject Rights + Section 26 + Right to be Informed + Access + Correction + Erasure + Object + Restriction + Portability + Automated Decision-Making + 30-Day Response + Free for First Request + Refusal Grounds Limited →Liechtenstein DSG Articles 15-22 Data Subject Rights (transposing GDPR Articles 15-22): Article 15 Right of Access (Auskunftsrecht) - to obtain confirmation of processing + access to personal data + supplementary information + 30-day standard response + 60-day...
LIDPA-Data-Subject-Rights-Access-Rectification-Erasure-Object-Portability-DSG-Articles-15-22-GDPR-Aligned · Liechtenstein DPA Data Subject Rights + Articles 15-22 + GDPR-Aligned →Questions people ask about data subject rights
What is Data Subject Rights?
Why is Data Subject Rights important for compliance?
Which compliance frameworks address Data Subject Rights?
Where can I learn more about Data Subject Rights?
See how Data Subject Rights applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.