Rights of Data Subjects

The data subject has the following rights:

  • to be informed, free of charge whether a data controller holds his, her or its personal information and to be notified that information about him, her or it is being collected; or that his personal information has been accessed or acquired by an unauthorised person;
  • to require to be given access to his personal information;
  • to request the correction, destruction or deletion of his, her or its personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading or obtained unlawfully;
  • to object, on reasonable grounds, to the processing of his, her or its personal information;
  • to object to the processing of his, her or its personal information at any time for purposes of direct marketing; and not to have his, her or its personal information processed for purposes of direct marketing by means of unsolicited electronic communications;
  • not to be subject, under certain circumstances, to a decision which is based solely on the basis of the automated processing of his, her or its personal information;
  • to submit a complaint to the Information Regulator regarding the alleged interference with the protection of personal information;
  • to institute civil proceedings regarding the alleged interference with the protection of his, her or its personal information.