Learning 3 - Individual rights and accountability
1. Section 3: Individual rights and accountability
Section 3: Individual rights and accountability
Turning legal rights into workable organisational processes.
Learning outcomes
By the end of this section, you should be able to:
- describe the main rights available to individuals;
- recognise a subject access request even when informal wording is used;
- outline a reasonable and proportionate SAR response process;
- explain privacy notices, retention schedules and data protection by design;
- identify when a DPIA is required; and
- describe key controller–processor responsibilities.
Rights give people meaningful control and transparency. Accountability requires organisations to build processes capable of recognising and responding to those rights.
Official reference points
- ICO: Individual rights
- ICO: Subject access requests
- ICO: Data protection impact assessments
- ICO: UK GDPR guidance and resources
Legal accuracy: reviewed against official UK sources on 14 July 2026. This learning content is educational and is not a substitute for case-specific legal advice.