Access, rectification and erasure

Right of access

Also known as a Subject Access Request (SAR). Individuals can ask what personal data you hold about them and why, and get a copy of it, normally free of charge and within one month.

Right to rectification

Individuals can have inaccurate personal data corrected, or incomplete data completed.

Right to erasure

Individuals can ask you to delete their data in specific circumstances, for example when it's no longer necessary for the purpose it was collected for, or consent is withdrawn and there's no other legal basis. This right has significant exemptions, for example where you have a legal obligation to keep the data.