Rights granted to individuals over their personal data — access, rectification, erasure, portability, restriction, objection.
Data Subject Access Requests (DSARs) and related rights include access (Art. 15), rectification (16), erasure / right to be forgotten (17), restriction (18), portability (20), and objection (21). Equivalent CCPA rights are access, deletion, correction, opt-out of sale/sharing, and limit use of SPI.
Run a free ComplianceIQ audit against GDPR and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.