Data subject rights
Individuals have rights to access and rectify their information, to restrict processing, and to object to processing of harassment data in certain circumstances.
Consent and lawful basis
Consent and lawful basis must be used appropriately. When consent is required, ensure it is informed, freely given, and revocable, especially for non essential data.
Privacy notices and requests
Privacy notices and communication are important. Provide clear information on data handling, retention periods, and contact details for inquiries.
Handling requests
Handling requests requires timely responses. Establish procedures to respond to data subject requests within regulatory timelines and document actions taken.