The right to the portability of data to another service or product provider, by means of an express request.

The right to anonymize, block, or delete unnecessary or excessive data or data that is not being processed in compliance with the LGPD.

The right to correct incomplete, inaccurate, or out-of-date data.

The right to confirmation of the existence of the processing.

The right not to be subject to discrimination for the exercise of rights.

The rights in relation to automated decision making and profiling.

List of the data subject rights imposed by GDPR, CCPA, and LGPD. Failure to address this obligation can result in substantial punitive fines. Regulations like the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) and most recently, Brazil’s Lei Geral de Proteção de Dados Pessoais (LGPD), oblige businesses that process PII to implement systems to honor data rights. Due to a boom in data privacy laws in recent years, honoring subject rights has become a vital operational consideration for any business that processes personal data.

They gain these rights when their Personally Identifiable Information (PII) is being processed by an organization. What Are Data Subject Rights?ĭata subject rights (DSR) are a series of entitlements that an individual or user can legally exercise with respect to that processed data. Having the right systems to address an Erasure Request fully while maintaining essential business data linkages is a crucial privacy challenge. Let’s take a step-by-step look at how to process these requests. The idea that an individual user can compel a company to delete all traces of their data is powerful, but servicing these requests properly requires a well-honed process and a deeper understanding of what is meant by erasure. Erasure Requests are one of the highest-profile forms of modern data privacy protection.

Erasure software