A key objective of the European GDPR is to strengthen the rights of data subjects towards the data processor, in particular
- the right of access (Section 15),
- the right to rectification (Section 16),
- the right to deletion (Section 17)
- and the right to restriction of processing (Section 18).
In addition, every person has the right to object (Section 21), which makes any future data processing inadmissible.
The legislator demands an immediate answer, within one month at the latest. The reply should be given in writing, where appropriate in electronic form, but with adequate data security.