GDPR gives people the right to receive a copy of any personal information a company holds on them. If an individual requests for their data then the requests will be dealt without delay and within one month, unless the request is particularly complex in which case a further two months may be allowed.
GDPR gives people the right to ‘block’ or suppress the processing of their personal data if, for example, they are disputing its accuracy.
GDPR gives people a right to object to certain types of processing such as for direct marketing purposes. This means that if someone receives material via e-mail, post or text, they can contact the company that sends out the material and ask them to stop, which the company must do immediately and free of charge.
However, this right does not apply if an automated decision is necessary for entering into a contract between the company and the individual, is authorised by law or was based on explicit consent.