Data Protection & Privacy
8 min read
08/01/2025
Legal Brain Team
Data Protection Rights
Your rights under GDPR and UK data protection law
Table of Contents
What is it?
Data protection rights give individuals control over how their personal data is collected, used, stored, and shared by organisations.
Key Points
- 1Right to be informed about data processing
- 2Right of access to your personal data
- 3Right to rectification of inaccurate data
- 4Right to erasure ("right to be forgotten")
- 5Right to restrict or object to processing
Typical Process
1
Identify the organisation holding your data
2
Submit request in writing (email acceptable)
3
Provide proof of identity if requested
4
Organisation has one month to respond
5
Complain to ICO if unsatisfied with response
6
Consider legal action for significant breaches
Common Examples
- •Requesting copy of personal data held by company
- •Asking for incorrect information to be corrected
- •Requesting deletion of old social media posts
- •Objecting to marketing emails or calls
- •Reporting unauthorised sharing of personal data
- •Claiming compensation for data breach
Related Laws & Regulations
UK General Data Protection Regulation (Articles 12-22)
Data Protection Act 2018 (Section 94)
Privacy and Electronic Communications Regulations 2003
Electronic Communications Act 2000
Freedom of Information Act 2000
When to Seek Professional Help
- ⚠Organisation ignoring your data rights requests
- ⚠Significant data breach affecting you
- ⚠Employer misusing your personal data
- ⚠Complex data processing arrangements
- ⚠Considering compensation claim
Need Help with Your Legal Matter?
Use Legal Brain's AI-powered tools to analyse your specific situation and get personalised insights.