Overview of Data Subject Rights

Track Your Course Progress
You are currently studying as a guest. Your course progress and quiz results will not be saved unless you login to your EduCourse account. Login to track your progress and qualify for your certificate.

Understanding Your Rights as a Data Subject

An overview of data subject rights gives you a clear picture of what control you have over your personal information. Under the Protection of Personal Information Act (POPIA), every South African has rights concerning the data companies or organisations collect about them.

These rights help protect your privacy and make sure your personal details are handled properly. Knowing these rights is important so you can ask questions or take action if you think your information is being misused or not protected.

Key Data Subject Rights Explained

  1. Right to be Informed
    You have the right to know what personal information is collected about you, how it is used, who it is shared with, and why it is needed.
  2. Right to Access Your Data
    You can ask any organisation to provide you with a copy of your personal information they hold. This helps you check if the information is correct.
  3. Right to Rectification
    If your personal data is wrong or incomplete, you can request it to be corrected or updated quickly and easily.
  4. Right to Object
    You may object to how your personal information is processed, especially for marketing or automated decision-making.
  5. Right to Erasure or ‘Right to be Forgotten’
    In certain situations, you can ask organisations to delete your personal information, for example if it is no longer needed or processed unlawfully.
  6. Right to Restrict Processing
    You can ask to limit how your data is used, especially while its accuracy or lawful use is in question.
  7. Right to Data Portability
    You can request your personal data in a format that allows you to move it from one service provider to another.

These rights give you more control over your data, helping you to protect your privacy and hold organisations accountable. Organisations must respect your rights and respond to your requests within a reasonable time, usually 30 days under POPIA.

Understanding and using your data subject rights ensures your personal information is safe and used fairly. It also encourages organisations to act responsibly and maintain your trust.

Live Scenario • Active Situation

You are a Customer Service Manager at a retail company handling a customer complaint about data privacy.

There is no single perfect answer. Choose what you would do in this situation.