GDPR grants individuals several rights concerning their personal data. These include the right to access, rectify, and erase their data, as well as the right to restrict processing and object to it. Epidemiologists must have protocols in place to address these rights promptly and effectively.