GDPR grants several rights to data subjects, which researchers must respect:
Right to be informed: Individuals have the right to know how their data is being used. Right of access: Individuals can access their personal data and understand how it is being processed. Right to rectification: Individuals can have inaccuracies in their personal data corrected. Right to erasure: Also known as the "right to be forgotten," individuals can request the deletion of their data under certain conditions. Right to restrict processing: Individuals can request the limitation of their data processing. Right to data portability: Individuals can obtain and reuse their data for their own purposes across different services. Right to object: Individuals can object to data processing in certain situations. Rights related to automated decision-making and profiling: Protections are in place against potentially harmful decisions made without human intervention.
