The GDPR foresees specific rights for individuals that have to be respected. You can do this by:
- informing individuals whose data you process about your processing operations and the processing purposes when you collect their data, for example via a privacy statement on your website;
- by responding to individuals’ requests to exercise their rights, such as access, rectification, objection, erasure or portability requests.
Organisations that are transparent about their use of personal data and that respect the rights of individuals are less likely to become subject to complaints.
More information: