Learning 3 - Individual rights and accountability
Completion requirements
1. Section 3: Individual rights and accountability
1.1. 3.1 The rights of individuals
3.1 The rights of individuals
The main rights people can exercise over their personal information.
| Right | What it means in practice |
|---|---|
| To be informed | Receive clear privacy information about how personal data is used. |
| Access | Obtain personal data and related information through a subject access request. |
| Rectification | Correct inaccurate data and complete incomplete data where appropriate. |
| Erasure | Request deletion in specified circumstances. This is not an absolute right. |
| Restriction | Limit the use of data in specified circumstances. |
| Data portability | Receive certain data in a structured, commonly used, machine-readable format. |
| Object | Object to specified processing. An objection to direct marketing must be honoured. |
| Automated decisions and profiling safeguards | Receive protection and safeguards in relation to relevant solely automated decisions and profiling. |
Rights are context-dependent. Whether a right applies can depend on the lawful basis, purpose, exemptions and facts. Staff should escalate rather than reject a request from memory.
Knowledge checkpoint
Answer each question before opening the suggested answer.
1. Which right allows a person to correct an inaccurate address?
Suggested answer: The right to rectification.
2. Which right is absolute for direct marketing?
Suggested answer: The right to object to direct marketing.
3. Is erasure always required whenever a person asks?
Suggested answer: No. The right to erasure applies only in defined circumstances and can be limited by lawful retention needs or exemptions.
Official reference points
Legal accuracy: reviewed against official UK sources on 14 July 2026. This learning content is educational and is not a substitute for case-specific legal advice.