GDPR – 3 years on

Under the Data Protection Act 2018, people have the right to find out what information the government and other organisations store about them.

These include the right to:

• be informed about how their data is being used
• access personal data*
• have incorrect data updated
• have data erased
• stop or restrict the processing of their data
• data portability (allowing them to get and reuse their data for different services)
• object to how their data is processed in certain circumstances.

*The right of access requests are now without charge to the data subject and the information must be provided within one calendar month.