A key aspect of the Regulations is that they empower Data Subjects, individuals whose data is being Processed, with specific rights, namely:

• The right to access;
• rectification;
• erasure;
• to object;
• to restriction;
• to data portability; and
• automated individual decision-making, including profiling.

Data Subjects who wish to exercise their rights should contact the relevant firm directly. 

Individuals who believe a firm has breached the Regulations, including failing to fulfil a Data Subject rights request, can lodge a complaint directly with the Data Protection Office.

Data Subjects can find more information on their rights in Part 3 of the Data Protection Regulations & Rules 2021 Guidance, and a complaint form can be found in the Data Protection Resources page.