What rights do data subjects have in different situations?

Not all of the rights of the data subject can be exercised in all situations, depending on factors such as the basis for the processing of personal data.

Some of the rights of the data subject are only related to specific bases for processing provided for in the GDPR. The controller must base the processing of personal data on a legal basis for processing.

Additional informaton on legal bases for processing personal data

It is possible to refuse to fulfil any of the rights in individual cases if there is a basis for refusal relevant to the right in question or the conditions for fulfilling the right are otherwise not met. In addition, special legislation concerning the organisation in question may provide for exceptions to the rights.

Right to obtain information on the processing of personal data
Right of access
Right to rectification
Right to erasure (right to be forgotten)
Right to restriction of processing
Notification obligation regarding rectification or erasure of personal data or restriction of processing
Right to data portability
The data subject can allow automated decision-making (including profiling) with his or her specific consent

Right to obtain information on the processing of personal data
Right of access
Right to rectification
Right to erasure (right to be forgotten)
Right to restriction of processing
Notification obligation regarding rectification or erasure of personal data or restriction of processing
Right to data portability
Right not to be subjected to automated decision-making without a legal basis

Right to obtain information on the processing of personal data, unless an exception has been provided for by law
Right of access
Right to rectification
Right to restriction of processing
Notification obligation regarding rectification of personal data or restriction of processing
Right not to be subjected to automated decision-making without a legal basis
- This can be enabled by legislation that confirms appropriate measures for safeguarding the rights, freedoms and legitimate interests of data subjects

Right to obtain information on the processing of personal data
Right of access
Right to rectification
Right to erasure (right to be forgotten)
Right to restriction of processing
Notification obligation regarding rectification or erasure of personal data or restriction of processing

Right to obtain information on the processing of personal data, unless an exception has been provided for by law
Right of access
Right to rectification
Right to restriction of processing
Notification obligation regarding rectification of personal data or restriction of processing
Right to object
Right not to be subjected to automated decision-making without a legal basis
- This can be enabled by legislation that confirms appropriate measures for safeguarding the rights, freedoms and legitimate interests of data subjects

Right to obtain information on the processing of personal data
Right of access
Right to rectification
Right to erasure (right to be forgotten)
Right to restriction of processing
Notification obligation regarding rectification or erasure of personal data or restriction of processing
Right to object

What rights do data subjects have in different situations?

Rights of the data subject when processing is based on consent

Rights when the processing is based on a contract

Rights when the processing is based on the controller's legal obligations

Rights when the processing is based on the vital interests of the data subject or another individual

Rights when the processing is based on a task carried out in the public interest or the exercise of public authority

Rights when the processing is based on the controller's legitimate interest

Common topics