Your data, your rights
Under the General Data Protection Regulation (GDPR), any organisation holding your data must, on request:
1. Tell you WHAT data they hold (right of access). 2. Correct it if it's wrong (rectification). 3. Delete it (erasure / 'right to be forgotten'). 4. Export it to you in a portable file (portability). 5. Stop using it for direct marketing.
You exercise these rights by emailing the organisation's Data Protection Officer (DPO). They have one month to respond. If they don't, file a complaint with your national Data Protection Authority — it's free.
Ready to test what you've learned
When you mark this module as finished, the assessment unlocks after a short delay (60 min) so the material can settle into longer-term memory.
Scroll to the end of the module to enable the finish button.