Welcome to the Gibraltar Regulatory Authority website

GIBRALTAR GDPR & DPA (23) GUIDANCE ON THE RIGHTS OF INDIVIDUALS

This document provides detailed guidance on the rights of individuals under the Gibraltar General Data Protection Regulation (the “Gibraltar GDPR”) and the Data Protection Act 2004 (the “DPA”) in relation to the processing of their personal data.

The rights of individuals under the Gibraltar GDPR and/or the DPA include the following:

• Articles 13 and 14 - The right to be informed (section 53 of the DPA).

• Article 15 - The right of access (section 54 DPA).

• Article 16 - The right to rectification (section 55 of the DPA).

• Article 17 - The right to erasure (section 56 of the DPA).

• Article 18 - The right to restrict processing (section 56 of the DPA).

• Article 20 - The right to data portability.

• Article 21 - The right to object.

• Article 22 - Rights in relation to automated decision making and profiling (sections 58 and 59 of the DPA).

The Guidance Note aims to assist individuals in understanding these rights and providing key procedural information in respect of each. The guidance is equally useful for organisations, to assist them in determining how best to process personal data to ensure the rights afforded to individuals under the applicable data protection legislation are upheld.

A set of infographics, linked below, emphasise the main points relating to the data protection rights of individuals.

A series of short videos that further explain said rights can be viewed on the GRA’s YouTube channel.