Data subject rights

The "Data Subject Rights" clause outlines the entitlements of individuals regarding the personal data collected and processed about them, including the rights to access, rectify, erase, restrict, and object to the processing of their data. It also often includes provisions on data portability, allowing individuals to receive their personal data in a structured, commonly used format for transfer to another data controller.

7 Data subject rights examples

  • Description
    Data Subject Rights. Participant understands that data subject rights vary depending on applicable law and that, depending on where he or she is based and subject to the conditions set out under applicable law, Participant may have the rights to (i) request access or copies of Data the Company processes, (ii) rectification of incorrect Data, (iii) deletion of Data, (iv) restrictions on processing of Data, (v) portability of Data, (vi) lodge complaints with competent authorities in Participant’s jurisdiction and/or (vii) receive a list with the names and addresses of any potential and actual recipients of Data. To receive clarification regarding these rights or to exercise these rights, Participant understands that he or she can contact his or her local human resources representative.
    Document
    JUNIPER NETWORKS INC (JNPR)
  • Description
    Data Subject Rights. The Grantee understands that data subject rights regarding the processing of Data vary depending on Applicable Laws and that, depending on where the Grantee is based and subject to the conditions set out in such Applicable Laws, the Grantee may have, without limitation, the right to (i) inquire whether and what kind of Data the Company holds about the Grantee and how it is processed, and to access or request copies of such Data, (ii) request the correction or supplementation of Data about the Grantee that is inaccurate, incomplete or out-of-date in light of the purposes underlying the processing, (iii) obtain the erasure of Data no longer necessary for the purposes underlying the processing, (iv) request the Company to restrict the processing of the Grantee’s Data in certain situations where the Grantee feels its processing is inappropriate, (v) object, in certain circumstances, to the processing of Data for legitimate interests, and to (vi) request portability of the Grantee’s Data that the Grantee has actively or passively provided to the Company or the Employer (which does not include data derived or inferred from the collected data), where the processing of such Data is based on consent or the Grantee’s employment and is carried out by automated means. In case of concerns, the Grantee understands that he or she may also have the right to lodge a complaint with the competent local data protection authority. Further, to receive clarification of, or to exercise any of, the Grantee’s rights, the Grantee understands that he or she should contact his or her local human resources representative.
    Document
    ELI LILLY & Co (LLY)
  • Description
    Data Subject Rights. Employee understands that data subject rights vary depending on the applicable law and that, depending on where Employee is based and subject to the conditions set out in the applicable law, Employee may have, without limitation, the rights to (i) request access or copies of Data the Company processes, (ii) rectification of incorrect Data, (iii) deletion of Data, (iv) restrictions on processing of Data, (v) portability of Data, (vi) lodge complaints with competent authorities in Employee’s jurisdiction, and/or (vii) receive a list with the names and addresses of any potential recipients of Data. To receive clarification regarding these rights or to exercise these rights, Employee understands that he or she can contact Employee’s local human resources representative.
    Document
    KBR, INC. (KBR)
  • Description
    Data Subject Rights.  The Grantee may have a number of rights under data privacy laws in the Grantee’s jurisdiction.  Depending on where the Grantee is based, such rights may include the right to (i) request access or copies of EU/UK Data the Company processes, (ii) rectification of incorrect EU/UK Data, (iii) deletion of EU/UK Data, (iv) restrictions on processing of EU/UK Data, (v) portability of EU/UK Data, (vi) lodge complaints with competent authorities in the Grantee’s jurisdiction, and/or (vii) receive a list with the names and addresses of any potential recipients of EU/UK Data.  To receive clarification regarding these rights or to exercise these rights, the Grantee can contact the Grantee’s local human resources representative.
    Document
    Mimecast Ltd
  • Description
    Data Subject Rights. You may have a number of rights under data privacy laws in your jurisdiction. Depending on where you are based, such rights may include the right to (i) request access or copies of Data the Corporation processes, (ii) rectification of incorrect Data, (iii) deletion of Data, (iv) restrictions on processing of Data, (v) portability of Data, (vi) lodge complaints with competent authorities in your jurisdiction, and/or (vii) receive a list with the names and addresses of any potential recipients of Data. To receive clarification regarding these rights or to exercise these rights, you can contact your local human resources representative.
    Document
    ROCKWELL AUTOMATION, INC (ROK)
  • Description
    Data Subject Rights. Holder understands that data subject rights vary depending on applicable law and that, depending on where Holder is based and subject to the conditions under applicable law, Holder may have, without limitation, the rights to (i) request access or copies of Data the Company processes, (ii) rectification of incorrect Data, (iii) deletion of Data, (iv) restrictions on processing of Data, (v) portability of Data, (vi) lodge complaints with competent authorities in Holder’s jurisdiction, and/or (vii) receive a list with the names and addresses of any potential recipients of Data. To receive clarification regarding these rights or to exercise these rights, Holder understands that he or she can contact the Company.
    Document
    RESMED INC (RMD, RSMDF)
  • Description
    Data Subject Rights. You understand that data subject rights regarding the processing of personal data vary depending on the applicable law. Additional location-based information on how Match Group and your Employer processes your Personal Data, including information regarding your rights under applicable data protection law are available at: •California Employee Privacy Policy •Canadian Employee Privacy Policy •EU Employee Privacy Policy (FR) •EU Employee Privacy Policy (ENG) •EU Employee Privacy Policy (GER) •APAC Employee Privacy Policy (ENG) •APAC Employee Privacy Policy (JP) 4 •Egyptian Employee Privacy Policy •Brazilian Employee Privacy Policy You may also find a copy of these policies available on Workday.
    Document
    Match Group, Inc. (MTCH)

What is Data Subject Rights?

Data Subject Rights refer to a set of rights granted to individuals (data subjects) under data protection laws that give them control over their personal data. These rights are primarily outlined in regulations such as the General Data Protection Regulation (GDPR) in the European Union. The main goal of data subject rights is to empower individuals with control over how their personal information is collected, processed, and used by organizations.

Examples of data subject rights include:

  • Right to Access: Individuals can request access to their personal data held by an organization.
  • Right to Rectification: Individuals have the right to request corrections to their inaccurate or incomplete personal information.
  • Right to Erasure (“Right to be Forgotten”): Individuals can request the deletion of their personal data under certain conditions.
  • Right to Restrict Processing: Individuals can request that their data is not further processed.
  • Right to Data Portability: Individuals have the right to receive their data in a structured, commonly used, and machine-readable format.
  • Right to Object: Individuals have the right to object to the processing of their data in certain circumstances.

When should I use Data Subject Rights?

You should consider invoking Data Subject Rights when you want to:

  • Access personal data that an organization holds about you to ensure it is secure and properly managed.
  • Correct any inaccuracies or errors in your personal data held by an organization.
  • Remove your personal data from an organization’s systems if you no longer want them to retain it.
  • Restrict the ways in which an organization uses your data if you feel it is being processed unlawfully or without your consent.
  • Transfer your personal data from one service provider to another easily and securely.
  • Object to the processing of your personal data for reasons related to your particular situation, especially in cases of direct marketing or profiling.

How do I write a Data Subject Rights request?

When writing a Data Subject Rights request, it is important to be clear and concise. Here is a general template you can use:

Subject: Data Subject Rights Request

Dear [Organization’s Data Protection Officer or contact person],

I am writing to you in your capacity as the Data Protection Officer of [Organization Name] to exercise my rights under the [specific data protection regulation, e.g., GDPR].

Request: I hereby request [specific right, e.g., access to] my personal data held by your organization.
Details: [Provide specific details or identifiers that will help the organization locate your data, e.g., account number, user ID].

Please confirm receipt of this request and provide a response within the statutory time frame.

Thank you for your assistance.

Sincerely,
[Your Full Name]
[Your Contact Information]
[Date]

Make sure to include any necessary identification to verify your identity, as organizations typically require this to prevent unauthorized data access.

Which contracts typically contain Data Subject Rights?

Data Subject Rights are generally outlined in:

  • Privacy Policies: These are publicly available documents that explain how an organization collects, uses, and manages a data subject’s personal data, including information about data subject rights and how to exercise them.

  • Data Processing Agreements (DPAs): These contracts between a data controller and data processor often incorporate provisions for how data subject rights should be handled, particularly in context where a processor is involved in the processing of personal data on behalf of a controller.

  • Terms of Service/User Agreements: In some cases, these contracts may reference data subject rights to inform users of how the organization complies with data protection laws.

  • Employment Contracts: For employees, these may contain clauses related to the processing of personal data, including the exercise of data subject rights with respect to their personal information held by the employer.

Understanding and including Data Subject Rights in these contracts helps ensure transparency and compliance with relevant data protection regulations.

Analyze your contracts.
Extract important clauses.

<

Try our AI contract analysis and extract important clauses and information from existing contracts.

< <
fynk app clause extraction screenshot

More Clauses from the Library

Dive deeper into the world of clauses and learn more about these other clauses that are used in real contracts.

Death of a member

The "Death of a Member" clause stipulates the procedures and consequences if a member of the contract passes away, including how shares, responsibilities, or benefits are redistributed or managed. It aims to provide clear guidance on transition and mitigate uncertainties, ensuring continuity and protecting the interests of surviving members or stakeholders.

11 example clauses

Deemed contribution and distribution

The "Deemed Contribution and Distribution" clause outlines the scenario in which contributions and distributions between parties are considered to occur based on agreed-upon terms, even if actual physical transfer of assets or funds does not take place. This clause ensures that the financial and legal implications of contributions and distributions are recognized and enforceable as though they had occurred in reality.

18 example clauses

Default interest rate

A default interest rate clause stipulates the interest rate that will be applied to overdue payments in a contract. This rate serves as a financial penalty, incentivizing timely payments and compensating the party owed for any delay.

9 example clauses