Rights of Data Subjects under GDPR are Not Absolute There is a common misconception that the rights of data subjects under GDPR are absolute, and under no circumstances can those rights be lost. ... The same applies to the processing of personal data in the prevention of threats to public security.