The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA). The GDPR aims primarily to give control back to citizens and residents over their personal data and to simplify the regulatory environment for international business by unifying the regulation within the EU.

The GDPR gives data subjects (individuals) a number of rights, including:

* **The right to be informed:** This right gives data subjects the right to be informed about the collection and use of their personal data. This includes information about the purpose of the processing, the categories of personal data being processed, the recipients of the personal data, and the data subject's rights.
* **The right of access:** This right gives data subjects the right to access their personal data that is held by a data controller. This includes the right to receive a copy of their personal data and information about how the data is being processed.
* **The right to rectification:** This right gives data subjects the right to have their personal data rectified if it is inaccurate or incomplete.
* **The right to erasure ('right to be forgotten'):** This right gives data subjects the right to have their personal data erased in certain circumstances, such as if the data is no longer necessary for the original purpose for which it was collected.
* **The right to restrict processing:** This right gives data subjects the right to restrict the processing of their personal data in certain circumstances, such as if the data subject contests the accuracy of the data.
* **The right to data portability:** This right gives data subjects the right to receive their personal data in a structured, commonly used, and machine-readable format. This allows data subjects to transfer their personal data from one data controller to another.
* **The right to object:** This right gives data subjects the right to object to the processing of their personal data in certain circumstances, such as if the processing is based on the data controller's legitimate interests.
* **The right not to be subject to a decision based solely on automated processing:** This right gives data subjects the right not to be subject to a decision that has a significant impact on them and that is based solely on automated processing, such as profiling.

Data subjects can exercise their rights by contacting the data controller who is processing their personal data. The data controller must respond to a data subject's request within one month.

The GDPR also gives data subjects the right to lodge a complaint with the relevant data protection authority if they believe that their rights have been violated.
spam fails_task lang_mismatch pii not_appropriate hate_speech sexual_content quality toxicity humor helpfulness creativity violence