Data Subject Rights under the GDPR

Having control over personal data is regarded as a fundamental right in the EU. Since the General Data Protection Regulation (GDPR) became enforceable May 2018, old rights were strengthened, and a range of new rights were introduced. How to navigate the changing landscape of data subject rights under the GDPR framework is the focal point of this volume. At the centre of this discussion are five key rights: the right to information, the right to access, the right to data portability, the right to be forgotten, and the rights related to profiling (the right to object and the right not to be subject to automated decision-making). With a focus on how these fit into big data economies, this book gives practitioners and activists the knowledge of how to pursue claims while also pointing out inefficiencies where data subject rights are concerned in a big data environment. As legal guidance slowly develops and still appears fragmented, this volume tackles the gaps and provides a thorough analysis of data subject rights under the new GDPR framework and their legal operation.

1 - Introduction
2 - Safeguarding individuals in the data-driven economy - EU data protection framework in the Nutshell
3 - Control as a central notion in the discussion on data subject rights
4 - The right to information
5 - The right of access under EU data protection law
6 - The right to be forgotten
7 - Data portability as a data subject right
8 - Data subject rights in relation to profiling
9 - Conclusions: striving for data subject control within and beyond data subject rights

Dr. Helena U. Vrabec works as a data protection expert at Palantir Technologies in New York (USA) and is a visiting researcher at eLaw - Center for Law and Digital Technologies at Leiden Law School (The Netherlands). She previously worked as a fellow at Yale Law School, a researcher at Leiden Law School and served as a European Commission ethics expert. Prior to that, she was a privacy adviser for Ernst & Young. Dr. Vrabec holds degrees in law from the University of Ljubljana (SI) and Tilburg University (NL), and a PhD in data protection law from Leiden University (NL).