The main rights for individuals under the GDPR are to: allow subject access have inaccuracies corrected have information erased prevent direct marketing prevent automated decision-making and profiling allow data portability (as per the paragraph above) source: https://www.clouddirect.net/11-things-you-must-do-now-for-gdpr-compliance/