Checks / Obligations / Honour people's data rights
Obligation · 21 controls · 6 laws
Honour people's data rights
People can access, correct, delete and move their data, object or opt out, and must be told how.
What to put in place
Publish how people exercise their rights and answer every request within the legal time limit.
Policy wording you can use
[your organisation] lets people access, correct, delete and move their personal data, object to its use and opt out of sale or profiling, and answers every request within the legal time limit.
Prove it once
Describe or link the evidence that this is in place: the policy, the page, the document reference. It is sealed once and applied to all 21 controls here that take a yes or a document (the rest need their own number or date and are listed after).
Every control that asks for this
CCPA / CPRA
- CCPA/CPRA - right to know honoured
- CCPA/CPRA - right to delete honoured
- CCPA/CPRA - right to correct honoured
- CCPA/CPRA - opt-out of sale
- CCPA/CPRA - opt-out of sharing
- CCPA/CPRA - limit sensitive PI use
- CCPA/CPRA - authorised agent honoured
- CCPA/CPRA - Do-Not-Sell/Share link
GDPR (UK and EU)
- GDPR Art.16 - rectification supported
- GDPR Art.17 - erasure supported
- GDPR Art.18 - restriction supported
- GDPR Art.20 - data portability supported
- GDPR Art.21 - right to object supported
Agent output: compliance gates
- GDPR Art.16 - rectification supported
- GDPR Art.17 - erasure supported
- GDPR Art.18 - restriction supported
- GDPR Art.20 - data portability supported
- GDPR Art.21 - right to object supported