Under data protection legislation, individuals have a number of rights in respect of their personal data. Data protection legislation provides a number of rights to data subjects with each right being applicable in certain circumstances or conditions. The rights are: Subject access requests For staff receiving a subject access request Right to data portability For staff receiving a data portability request Right to be forgotten (right to erasure) Individuals can request that their personal data is erased or destroyed. Also known as the “right to be forgotten”. Right to object Individuals have the right to object at any time to the use or storage of their personal data. Right to rectification If personal data is inaccurate, out of date, or incomplete, individuals have the right to correction, update or completion of that data. Right to restrict processing Individuals can request that the use or storage of their data is restricted in a manner of the individuals’ choosing. Right to object to automated processing Individuals have the right not to be subject to automated processing, including profiling.