1. Section 3: Individual rights and accountability

UK data protection learning

Section 3: Individual rights and accountability

Turning legal rights into workable organisational processes.

Learning outcomes

By the end of this section, you should be able to:

  • describe the main rights available to individuals;
  • recognise a subject access request even when informal wording is used;
  • outline a reasonable and proportionate SAR response process;
  • explain privacy notices, retention schedules and data protection by design;
  • identify when a DPIA is required; and
  • describe key controller–processor responsibilities.

Rights give people meaningful control and transparency. Accountability requires organisations to build processes capable of recognising and responding to those rights.

Official reference points

Legal accuracy: reviewed against official UK sources on 14 July 2026. This learning content is educational and is not a substitute for case-specific legal advice.